The Information Commissioner's Office (ICO) looked at 215 data breach cases at schools between January 2022 and August 2024, noting that 57 percent were caused by students, and almost a third (30 percent) were caused by stolen login details. In the case of stolen logins - either by students seeing others input credentials and remembering, or simply reading them noted down on paper - pupils were behind 97 percent of these attacks.