‘Small percentage’ of personal data stolen in cyberattack, council says | #ransomware | #cybercrime


A “small percentage” of data stored on a council’s education network, including personal data, was stolen in a recent cyberattack, according to local authority bosses.

On May 6, West Lothian Council experienced a “sophisticated” ransomware attack from a group of unknown cyber-assailants.

This led to the authority’s education network being isolated from its wider systems.

The council said on Wednesday that while the majority of data stolen relates to operational issues for schools, such as lesson plans, some personal or sensitive data had been hijacked.

The council said a risk assessment on any child protection issues had been carried out.


READ MORE:

Police probe after school damaged in deliberate fire

Council suffers ‘suspected criminal ransomware cyberattack’

 

Council warned of law breach over failure to help sick Leighton’s Law toddler


In an email sent to parents and carers, the council said: “Only a small percentage of the overall data held on our education servers was stolen, and the vast majority of information held on them relates to operational issues for schools, such as lesson plans, that do not contain any personal details.

“We are aware that some personal or sensitive data is among the information stolen by criminals.

“Risk assessment have been carried out on any potential child protection issues, and appropriate action already taken, if required.

“This remains a live criminal investigation, and we are working with all relevant external agencies, including Police Scotland and the Scottish Government.”

The council says the education network remains separate from its other systems, and work had been carried out to ensure there was minimal disruption to education, including SQA exams.

The council added: “As a precaution, everyone should be extra vigilant and be aware that there remains the possibility that any stolen data might be used for further criminal activity, such as phishing attacks or other scams.”

A Police Scotland spokesperson said: “On Tuesday, 6 May, 2025, we received a report of a cyber incident in the West Lothian area.

“Enquiries are ongoing and we are providing support to those affected.”

 



Source link

.........................

National Cyber Security

FREE
VIEW