Cyber Attack on Powys Schools Compromises Staff and Pupil Data

A cyber attack on Powys schools has led to the unauthorized access of personal data belonging to staff and pupils. Powys County Council confirmed the breach was identified in April 2026 and affected 13 schools, although data was accessed from only one school. The council has taken immediate action to secure systems and is collaborating with cybersecurity experts and law enforcement for a thorough investigation. Families of affected individuals are being contacted directly, but the specific type of data compromised has not been disclosed. The council has reported the incident to the Information Commissioner’s Office and is prioritizing transparency throughout the investigation. Despite the breach, all schools remain operational with no disruption to educational activities. The cause of the attack is still under investigation.

Key Points: • Personal data from one school in Powys accessed during a cyber attack affecting 13 schools. • Immediate containment measures were implemented, and an investigation is ongoing with specialist support. • Affected individuals are being contacted directly, but specific details about the data compromised are not disclosed.