Overview
- Investigators have found over 320,000 files taken from the council’s Trading with Schools system and posted on the dark web, with the breach traced to data from 39 schools.
- The platform was infiltrated with malicious software on 21 September and was shut down by the council on 25 September as teams worked to contain the attack.
- Bristol City Council is working with cyber security experts, Avon and Somerset Police and the South West Regional Organised Crime Unit to review the posted files and notify those affected.
- Affected schools reported disruption to daily administration including phone outages and extra staff work as they reverted to manual processes during and after the shutdown.
- Authorities warn parents, carers and staff to be vigilant for phishing and unusual financial activity because organised criminals often sell or later publish stolen slices of data to enable fraud or blackmail.