LowBreach / campaignMonitoring

Bristol schools hack: The Sun claims 320,000 files leaked on dark web

The Sun reports up to 320,000 files from a Bristol schools IT attack were published on the dark web; parents should watch for scam messages.

Published
Exploitation
No, no exploited vulnerability is confirmed and the entry point is not confirmed

What happened

The Sun reports that up to 320,000 files stolen in a cyber attack targeting schools have been published on the dark web. This is The Sun’s account. The article does not name the group behind the leak or the site where the files were posted, and it does not say the leaked files have been independently verified. The Sun also does not quote Bristol City Council confirming that the files were published.

According to The Sun, the attack took place in September and targeted a school server belonging to Bristol City Council. The Sun says 88 schools that use the council’s Trading with Schools IT platform were affected. The headline describes the material as children’s data. The article does not say what types of data the files contain, so this is not confirmed.

According to The Sun, the council says it is working with schools, specialist cyber security advisers, Avon and Somerset Police and the Regional Organised Crime Unit while investigations continue. The Sun also reports that the council was unable to confirm every school or individual affected.

Several details are not confirmed:

  • Who carried out the attack.
  • How the attackers got in.
  • Whether the published files have been independently verified.
  • The exact contents of the files.

The Sun reports that Vik Verma, director of education and skills at Bristol City Council, told parents to “remain vigilant”. The Sun also quotes Verma saying the council will keep schools, parents and carers updated as more information becomes available.

Am I affected?

  • Possibly affected: families and staff at the 88 schools that, according to The Sun, use Bristol City Council’s Trading with Schools IT platform.
  • Not confirmed: which individual schools or people are affected. The Sun reports the council could not yet confirm this.
  • What to rely on: check communications from your child’s school or from Bristol City Council.

What to do now

  1. Be cautious of unexpected messages, emails or phone calls. The Sun quotes this as the council’s advice.
  2. Follow the guidance your school is sharing on spotting scams and fraud that can follow data theft. The Sun reports schools have issued this guidance to parents and guardians.
  3. Watch for further updates from Bristol City Council and your school. According to The Sun, the council says it will share more as the investigation continues.

Sources