“Personal and sensitive” files from schools were among the data stolen in a cyberattack on a Scottish local authority.
West Lothian Council said that names, addresses, email addresses and learning materials may have been taken from the 12 affected schools, which have been named for the first time and include 11 of the authority’s 13 secondaries.
Social work reports have also been “compromised”.
However, the council said that “a thorough investigation” showed that “only a small percentage of the total data stored on our education network was compromised”.
‘Extra vigilance’ called for
Families at affected schools have been advised to take precautions, although the council said that “a very small proportion” of the affected files are “of a personal and sensitive nature”.
The council advised that “everyone should be extra vigilant and be aware that there remains the possibility that any stolen data might be used for further criminal activity, such as phishing attacks or other scams”.
In an , West Lothian Council said that the previously reported ransomware cyberattack on Tuesday 6 May remains subject to “a live criminal investigation”.
“A small proportion of files that were stolen were of a personal and sensitive nature,” said the council.
“For example, it is possible that names, addresses, email addresses and learning materials were among the data taken from the affected schools. Parents/carers with children at any of the affected schools should be aware of this information and take appropriate precautions.”
The statement added: “Reports shared by social work and other agencies were also compromised. Our staff have already contacted those individuals deemed to be most at risk in relation to this.”
Recommended precautions
Recommended precautions are . They include creating a “strong and unique” password.
The council stated: “Due to the increasing number of cyberattacks affecting a range of business and organisations, everyone is urged to be extra vigilant with their data online.”
This afternoon the council told Tes: “The recovery phase of work to restore services back to normal is ongoing, and we will have a new education network in place for the start of August 2025 term to support learning.”
All but one of the 12 West Lothian schools affected is a secondary, with the full list comprising:
- Armadale Academy
- Bathgate Academy
- Broxburn Academy
- Deans Community High School
- Inveralmond Community High School
- James Young High School
- Linlithgow Academy
- St Kentigern’s Academy
- St Margaret’s Academy
- West Calder High School
- Whitburn Academy
- Holy Family Primary.
The BBC that a group called Interlock claimed it was behind the attack on West Lothian Council, and that such groups use malicious software to encrypt an organisation’s files, then threaten to publish material online if a payment is not received.
In a separate development today, four young people have been arrested for their suspected involvement in the cyberattacks against Marks & Spencer, the Co-op and Harrods.
You can now get the UK’s most-trusted source of education news in a mobile app. Get Tes magazine on and on
