320,000 files leaked online by criminals in Bristol schools cyber-attack

An investigation has found that 320,000 files stolen from a council’s school network have been published online following a cyber-attack on 88 schools in Bristol. Bristol City Council says a significant number of files have been made available online. It's urgently working with Avon and Somerset Police, the South West's regional organised crime unit and cybersecurity experts to review what information has been leaked and who exactly is affected.

Schools are being issued with guidance to reduce the risks of scams and fraud that can follow a data theft. What happened? Bristol City Council say the cyber-attack happened in September and affected schools that use its Trading with Schools IT platform. In a statement, it said: "Officers and specialist cyber security advisers are continuing to review the published material to establish the nature of the information involved, which schools and or any individuals who may be affected.

"At present, it is not possible to confirm all schools or individuals affected by the theft. Officers are working to audit the published files and establish this picture as quickly as possible. "Schools have been issued with guidance to share with parents and carers to help reduce the risk of scams and fraud that can sometimes follow a data theft." Advice for parents The council has issued a list of advice for parents which includes: Being cautious of unexpected emails, text messages and phone calls, even if they appear to come from a trusted organisation.

Avoiding clicking on links or opening attachments in unexpected messages. Being wary of requests to reset passwords, verify account details or provide personal or financial information. Using strong and unique passwords on important online accounts and enabling two-factor authentication where available. Monitoring online accounts and bank statements for any unusual activity. Reporting suspicious emails to report@phishing.gov.uk and suspicious text messages to 7726.

Vik Verma, Director of Education and Skills at Bristol City Council added: "We understand that people will want answers about what information may have been affected and whether it relates to them or their family. "Determining that remains a key focus of our investigation, and officers are working through a large volume of material as quickly as possible. "While this work continues, we are making sure schools, families and staff have clear advice on the practical steps they can take to protect themselves online.

"We would encourage everyone to remain vigilant, be cautious of unexpected messages, emails or phone calls, and follow the guidance being shared through schools. "We continue to work closely with schools, cyber security specialists and law enforcement partners to understand the full impact of this incident."