Data breach confirmed at school in Bristol after targeted cyber attack
Records were exported from Southville Primary School's system, Bristol City Council says
A data breach has been confirmed at a Bristol primary school following a targeted cyber attack, Bristol City Council has said.
The council said the attack was on the management information system used by Southville Primary School.
It said evidence has been identified that records were exported from the system as a result.
The breach has been reported to the Information Commissioner's Office (ICO).
Affected parents and carers have been informed.
The school is working with Bristol City Council, specialist cyber security experts and law enforcement partners as investigations continue.
The council said supporting the school and affected families remains its immediate priority while work continues to establish the full circumstances.
Link to the Schools IT cyber attack
The council said the breach is separate from the recent cyber attack on the Schools IT network.
It said it believes the same criminals carried out both, but this has not been confirmed.
School management information systems are not hosted on the Schools IT network, so should not have been directly affected by the attack council teams have been responding to over recent weeks, according to the council.
The council said there remains no evidence of mass export of data from the Schools IT network.
It said the council, specialist cyber security experts and the Regional Organised Crime Unit are investigating both attacks and any potential connections between them.
Councillor's response
Cllr Christine Townsend, Chair of Bristol City Council's Children and Young People Committee, said: "I know that news of any cyber incident involving a school will be worrying for parents, carers, staff and the wider community. My thoughts are with everyone affected, particularly the Southville Primary School community, as they come to terms with this incident and await the outcome of the ongoing investigation."
Cllr Townsend also said: "The incident affecting Southville Primary School's management information system is the subject of a separate investigation. We are working closely with the school, specialist cyber security experts, law enforcement partners and the Information Commissioner's Office to understand how this breach occurred and the full extent of its impact."
Schools IT services being restored
The council said it disconnected affected schools from the internet when suspicious activity was identified on the Schools IT network.
It said this caused disruption for schools but was an important step in safeguarding services and supporting the forensic investigation.
According to the council, the vast majority of affected schools now have interim internet connectivity restored.
As of the evening before the update was published, 84 of the 88 affected schools had resumed limited internet access.
That includes all 39 schools directly supported by the council's IT service.
Work continues with the remaining schools to complete the necessary checks before reconnection.
The council said it is working to a timetable of returning full service by the half term break for schools that only purchase the internet from Schools IT.