Bristol Council Confirms 320,000 School Files Stolen in September Breach

Bristol City Council confirmed that approximately 320,000 school files appeared on the dark web following a cyberattack on September 21. The breach, which has drawn attention from national security bodies, remains under active investigation more than seven weeks after the initial intrusion.

The council stated it was notified of the dark web upload on October 30. Schools received the alert that same day, while parents and carers were informed on November 3. The incident potentially affects 39 schools, though officials have not yet identified the specific contents of the stolen files or their exact source.

The National Cyber Security Centre (NCSC) described the theft as concerning. A spokesperson noted that cyber criminals target entities they believe can generate revenue, calling the targeting of child education providers deeply unpleasant. The NCSC pointed to existing guidance for educational settings to protect against such attacks and for individuals whose data may have been exposed.

The Information Commissioner's Office (ICO) is assessing information provided by Trading with Schools regarding the incident. An ICO spokesperson emphasized that organizations must handle personal information securely. The office advised affected individuals to check for updates from the impacted organization and visit the ICO website for support.

Bristol City Council is coordinating with multiple agencies, including Avon and Somerset Police and the South West Regional Organised Crime Unit (SWROCU). The council works with these partners to determine the scope of the leak and the methods used by the attackers.

The SWROCU reported it had no further updates to share from the investigation at this time. The exact nature of the data remains unknown, leaving parents and school administrators waiting for clarity on the specific risks to student and staff records.