Thousands of Bristol school files published on dark web by hackers after cyber

Around 320,000 files taken during a cyber-attack that affected schools in Bristol have been published on the dark web by hackers, the council has said. The cyber-attack happened on September 21 and impacted 39 schools across the city.

The attack targeted the Trading with Schools platform, where malicious software was installed on some devices.

Affected schools were disconnected from the shared network, but investigations since the incident identified a "significant number of files" which were believed to have been taken and made available online.

Bristol City Council said that 320,000 files are believed to have been taken from the network and it is believed to have impacted 39 schools.

It is believed that the data theft only affected the schools who receive "a greater level of service" from the IT network and is unlikely to have directly impacted the other 49 schools who receive internet access only.

It said it is continuing to work closely with schools, specialist cyber security advisers, Avon and Somerset Police and the Regional Organised Crime Unit as investigations continue.

The council said it is reviewing the material published to "establish the nature of the information involved", as well as which schools and/or individuals are affected.

'People will want answers'

The council added that it is not possible to confirm all schools or individuals affected by the breach at this time.

Vik Verma, Director of Education and Skills at Bristol City Council, said: "We recognise that news of a data theft linked to this cyber-attack will be concerning for parents, carers, school staff and the wider school community.

"We understand that people will want answers what information may have been affected and whether it relates to them or their family.

"Determining that remains a key focus of our investigation, and officers are working through a large volume of material as quickly as possible.

"While this work continues, we are making sure schools, families and staff have clear advice on the practical steps they can take to protect themselves online.

"We would encourage everyone to remain vigilant, be cautious of unexpected messages, emails or phone calls, and follow the guidance being shared through schools.

"We continue to work closely with schools, cyber security specialists and law enforcement partners to understand the full impact of this incident.

"We will keep schools, parents and carers updated as more information becomes available."

The council has issued guidance to schools, which has been shared with parents and carers, to reduce the risk of scams and fraud that could follow the data theft. The advice includes:

Being cautious of unexpected emails, text messages and phone calls, even if they appear to come from a trusted organisation.

Avoiding clicking on links or opening attachments in unexpected messages.

Being wary of requests to reset passwords, verify account details or provide personal or financial information.

Using strong and unique passwords on important online accounts and enabling two-factor authentication where available.

Monitoring online accounts and bank statements for any unusual activity.

Reporting suspicious emails to [email protected] and suspicious text messages to 7726.