SUCCESS STORY
Spark Education Trust strengthens digital resilience with Boxphish
Overview
Spark Education Trust, comprising several digital schools with a large proportion of learning and operations conducted online, partnered with Boxphish to enhance cyber awareness across its staff. Having experienced a number of phishing, compromised passwords, and denial of service attacks since 2017, the Trust wanted a more immersive, experience-based training solution than their initial in-house programmes.
By implementing Boxphish, Spark Education Trust has improved staff vigilance, fostered a culture of digital awareness, and empowered employees to respond confidently to potential cyber threats.

"Boxphish simulations are often the topic of conversation across the school, especially when a rogue email is received. Staff often say ‘I’ve been Boxphished again!’ and often this response is to real phishing emails, which is brilliant. Overall, we are really pleased with Boxphish. Not only with their product offer, but with their level of support, response time and continuous drive to improve."
Director | Conyers School, Spark Education Trust

Challenge
Despite prior in-house phishing simulations and digital threat training, the Spark Education Trust faced several challenges:
Maintaining staff awareness across multiple schools with predominantly digital operations.
Providing immersive, real-world experiences that reflect current cyber attack strategies.
Ensuring staff could respond confidently and consistently to phishing attempts and other digital threats.
Encouraging a culture of transparency and open discussion about cyber security incidents.
Solution
Boxphish’s platform allowed the Spark Education Trust to run repeated simulations and training exercises with minimal disruption. The engaging, bite-sized approach integrated seamlessly into daily routines while encouraging open discussion of cyber threats. Boxphish implemented a comprehensive cyber awareness programme for the Trust, including:
Frequent simulated phishing exercises mirroring real-world threats staff might encounter.
Bite-sized, accessible courses delivering digital threat awareness in manageable chunks.
Ongoing training to ensure staff remained informed of evolving cyber attacker strategies.
Reporting tools to identify vulnerabilities and track engagement across multiple schools.
Impact
Boxphish’s solution delivered measurable benefits for the Spark Education Trust, including:
01.
Increased vigilance and improved response to phishing and suspicious emails.
02.
Creation of a culture of digital awareness and transparency across all schools.
03.
Staff confidence to report incidents promptly, enabling swift corrective action.
04.
Frequent, interactive learning experiences that reinforced key security behaviours.
05.
Reduced risk of successful cyber attacks through consistent, practical education.
Standout features

Realistic, frequent phishing simulations tailored to everyday threats.

Bite-sized, accessible courses for easy, continuous learning.
Encouraged open discussion and reporting of cyber incidents.
Clear reporting and monitoring of engagement and vulnerabilities.
Strong focus on practical, immersive learning experiences.
Future outlook
Spark Education Trust plans to continue expanding Boxphish training across all schools, further strengthening its digital resilience. The partnership remains central to embedding a vigilant, informed, and confident staff culture across the Trust’s digital operations.
Would Spark Education Trust recommend Boxphish?
“We are delighted to work with Boxphish to support us in further strengthening our digital resilience.”
Director | Conyers School, Spark Education Trust.

KEEP UP TO DATE
See more case studies
Apr 9, 2026
Local Authority data breaches report: Q3 2025 (Nov 25 - Jan 26)
Apr 9, 2026
Retail data breaches report: Q3 2025 (Nov 25 - Jan 26)
Apr 9, 2026
Education data breaches report: Q3 2025 (Nov 25 - Jan 26)


