SUCCESS STORY

Spark Education Trust strengthens digital resilience with Boxphish

Overview

Spark Education Trust, comprising several digital schools with a large proportion of learning and operations conducted online, partnered with Boxphish to enhance cyber awareness across its staff. Having experienced a number of phishing, compromised passwords, and denial of service attacks since 2017, the Trust wanted a more immersive, experience-based training solution than their initial in-house programmes. 

By implementing Boxphish, Spark Education Trust has improved staff vigilance, fostered a culture of digital awareness, and empowered employees to respond confidently to potential cyber threats. 

"Boxphish simulations are often the topic of conversation across the school, especially when a rogue email is received. Staff often say ‘I’ve been Boxphished again!’ and often this response is to real phishing emails, which is brilliant. Overall, we are really pleased with Boxphish. Not only with their product offer, but with their level of support, response time and continuous drive to improve."

Director | Conyers School, Spark Education Trust

social engineering

Challenge

Despite prior in-house phishing simulations and digital threat training, the Spark Education Trust faced several challenges: 

    Maintaining staff awareness across multiple schools with predominantly digital operations.

    Providing immersive, real-world experiences that reflect current cyber attack strategies.

    Ensuring staff could respond confidently and consistently to phishing attempts and other digital threats.

    Encouraging a culture of transparency and open discussion about cyber security incidents.

    Solution

    Boxphish’s platform allowed the Spark Education Trust to run repeated simulations and training exercises with minimal disruption. The engaging, bite-sized approach integrated seamlessly into daily routines while encouraging open discussion of cyber threats. Boxphish implemented a comprehensive cyber awareness programme for the Trust, including: 

    Frequent simulated phishing exercises mirroring real-world threats staff might encounter.

    Bite-sized, accessible courses delivering digital threat awareness in manageable chunks.

    Ongoing training to ensure staff remained informed of evolving cyber attacker strategies.

    Reporting tools to identify vulnerabilities and track engagement across multiple schools.

    Impact

    Boxphish’s solution delivered measurable benefits for the Spark Education Trust, including: 

    01.

    Increased vigilance and improved response to phishing and suspicious emails. 

    02.

    Creation of a culture of digital awareness and transparency across all schools. 

    03.

    Staff confidence to report incidents promptly, enabling swift corrective action. 

    04.

    Frequent, interactive learning experiences that reinforced key security behaviours. 

    05.

    Reduced risk of successful cyber attacks through consistent, practical education. 

    Standout features

    Realistic, frequent phishing simulations tailored to everyday threats. 

    Bite-sized, accessible courses for easy, continuous learning. 

    Encouraged open discussion and reporting  of cyber incidents. 

    Clear reporting and monitoring of engagement and vulnerabilities.

    Strong focus on practical, immersive learning experiences. 

    Future outlook

    Spark Education Trust plans to continue expanding Boxphish training across all schools, further strengthening its digital resilience. The partnership remains central to embedding a vigilant, informed, and confident staff culture across the Trust’s digital operations. 

      Would Spark Education Trust recommend Boxphish?

      We are delighted to work with Boxphish to support us in further strengthening our digital resilience.

      Director | Conyers School, Spark Education Trust.

      trusted data security training

      KEEP UP TO DATE

      See more case studies

      Apr 9, 2026

      Local Authority data breaches report: Q3 2025 (Nov 25 - Jan 26)

      Apr 9, 2026

      Retail data breaches report: Q3 2025 (Nov 25 - Jan 26)

      Apr 9, 2026

      Education data breaches report: Q3 2025 (Nov 25 - Jan 26)

      Ready to transform your cyber culture? Book a demo today!