Berchem School Hit by Cyberattack as Hackers Target Parents With €50 Ransom Demand

Why It Matters

The attack illustrates how ransomware can extend beyond institutional disruption to target families, amplifying financial and emotional pressure. It underscores the urgent need for robust cybersecurity investments in schools, which often lack sufficient protection.

Key Takeaways

• Hackers breached OLV Pulhof servers, causing outage
• Ransom demanded €50 per child, targeting parents directly
• School refused payment, involved police and RCCU
• Classes continued using temporary systems after breach
• Incident highlights rising ransomware risk for European schools

Pulse Analysis

The recent cyberattack on Onze‑Lieve‑Vrouwinstituut Pulhof in Berchem underscores how quickly ransomware can cripple an educational institution. Shortly after the winter break, threat actors infiltrated the school's network, disabled core servers and forced a rapid shutdown of internal systems. Because schools store extensive personal data—student records, photos, contact details—they present an attractive target for criminals seeking both disruption and leverage. The breach forced the school to migrate to a temporary environment while investigators traced the intrusion, highlighting the fragility of legacy IT stacks common across European schools.

What set this case apart was the attackers’ direct extortion of families, demanding €50 per child and threatening to publish addresses and photographs. By shifting pressure onto parents, the criminals exploited emotional ties and created a community‑wide panic that can amplify the perceived value of the data. School officials promptly warned against any payment and urged families not to click suspicious links, a stance supported by cybersecurity experts who note that ransom payments rarely guarantee data recovery and may encourage further attacks. The involvement of the Federal Judicial Police and the regional Computer Crime Unit demonstrates a coordinated law‑enforcement response, yet the investigation remains open.

The Berchem incident serves as a warning that under‑funded school IT departments are increasingly exposed to sophisticated ransomware campaigns. Policymakers across the EU are urging tighter cybersecurity standards, mandatory incident‑response plans, and dedicated funding for modernizing network defenses in the education sector. For administrators, the immediate take‑away is to adopt multi‑factor authentication, regular backups stored offline, and comprehensive staff training to recognize phishing attempts. As attackers continue to weaponize personal data, schools that invest proactively in resilience will be better positioned to protect students, families, and public trust.