The education sector is increasingly being targeted by cybercriminals, who use ransomware to prevent schools from retrieving their own data and then demand cash to restore access. With such attacks resulting in months of disruption and distress, what can be done to minimise the risks? Simon Creasey reports