Cyber Assault Takes Mobile Guardian MDM Down, Erasing Data on Thousands of Students’ Devices

An attack on the digital infrastructure of Mobile Guardian, a British firm that specializes in managing devices for educational purposes, has led to significant disruptions in schools globally, rendering numerous students unable to get to their files.

In a public acknowledgment on its official website, Mobile Guardian disclosed that it discovered “unauthorized access to the iOS and ChromeOS devices under its management.”

The breach had a worldwide impact, hitting users in areas including North America, Europe, and Singapore. This resulted in a part of its clientele having their devices disconnected from the service and “erased remotely,” as per the company’s statement.

The current situation prevents users from accessing the Mobile Guardian Platform, leading to limitations on student device usability, according to the firm.

MDM (Mobile Device Management) software like Mobile Guardian’s plays a crucial role for companies and educational institutions, empowering them to remotely control and oversee a wide range of devices used by staff or students.

Following the attack, Singapore’s Ministry of Education, a major client since 2020 as highlighted by Mobile Guardian, reported that the incident led to the remote deletion of thousands of student devices.

“Early assessments indicate approximately 13,000 students from 26 secondary schools in Singapore had their devices remotely cleared by the attacker,” said the ministry via an official communication.

In response, the ministry is in the process of eliminating the Mobile Guardian application from its assortment of student gadgets, including iPads and Chromebooks affected by the onslaught.

Reports on social media, viewed by TechCrunch, reveal that educators and students in the U.S., as well as other affected regions, are encountering service interruptions and difficulties in accessing their data. One particular report shows a cluster of iPads in a Singaporean school’s IT office that required reconfiguration because of the Mobile Guardian incident.

It is reported that Mobile Guardian serves over 2,500 educational institutions across more than 50 countries globally, as indicated by a document from the Singaporean government in May addressing a prior security breach.

TechCrunch reached out to MobileGuardian’s CEO Patrick Lawson with several questions regarding the breach, including any communication from the supposed cybercriminal(s), and whether the incident has been reported to the United Kingdom’s data protection authority, the ICO. Questions about who oversees cybersecurity within Mobile Guardian were also posed.

In response, Lawson corrected a typographical error in the company’s official statement that was pointed out in our inquiry for comment but did not address our overarching questions.

---

If you have further information on the Mobile Guardian cyberattack or have been impacted, please reach out. You can contact this reporter via Signal and WhatsApp at +1 646-755-8849, or through email. SecureDrop can be used for submitting files and documents.