Cyber attack at Powys school results in 'unauthorised access to some personal data'

Some personal data relating to pupils, staff and others connected to one Powys school has been accessed in a cyber attack, early investigation findings have confirmed.

Work is ongoing to fully understand the scope of the incident and identify all those affected.

Powys County Council said it is responding to a cyber security incident affecting some school systems, which has resulted in unauthorised access to some personal data.

The incident was initially identified in April and was contained quickly. The council said “immediate and robust action” was taken to secure systems and limit further impact.

Specialist experts and partners are supporting a “detailed and ongoing” investigation.

Councillor Raiff Devlin, cabinet member for customers, digital and community services and Councillor James Gibson-Watt, cabinet member for a learning Powys, said: “We understand that this incident will be very concerning for parents, staff and the wider community. We want to reassure people that immediate action was taken to secure systems, and a full investigation is underway with specialist support.

“We are contacting affected individuals directly where necessary and providing advice on steps they can take to protect themselves.

“The safety and wellbeing of pupils and staff remain our absolute priority, and we are committed to being transparent as our investigation progresses and will continue to support our schools throughout.”

Schools remain open and operational, and there is no evidence of disruption to education provision.

For more information, see www.powys.gov.uk/CyberIncident.