On 04 January, a leading provider of school websites was hit by a massive ransomware attack. The provider, Finalsite, manages content, communications, mobile apps and enrolment for over 8,000 schools. It was forced to take its services offline while it addressed the hack. Security staff first noticed the attack in certain corporate systems and quickly set to work restoring services and corporate networks. Most school services were restored within a week of the attack, and Finalsite has still found no evidence that customer data was stolen. This is the latest of many attacks on service providers, in turn disrupting the systems of thousands of customers.