Primary school hit by targeted cyber-attack

A primary school has been hit by a targeted cyber-attack, a council has said.

Bristol City Council said records at Southville Primary School were exported from its management information system during the attack.

The council said it believed the attack was "carried out by the same criminals" who targeted its system it uses to manage the schools it runs last month, but added that had not been confirmed.

The council said it had told parents and carers affected and the breach had been reported to the Information Commissioner's Office (ICO).

An investigation by the council, specialist cyber security experts, and the Regional Organised Crime Unit has launched to establish the full circumstances of the attack.

They are investigating both incidents and exploring any potential connections between them.

The council said there was no evidence of a mass export of data from its Schools IT network.

It said: "It is important to stress that whilst this is a separate incident from the recent cyber-attack affecting the Schools IT network we believe it has been carried out by the same criminals though this has not been confirmed."

Councillor Christine Townsend, chair of Bristol City Council's children and young people committee, said: "The incident affecting Southville Primary School's management information system is the subject of a separate investigation.

"We are working closely with the school, specialist cyber security experts, law enforcement partners and the Information Commissioner's Office to understand how this breach occurred and the full extent of its impact.

"Our priority remains supporting schools, protecting children and families, restoring services safely and securely, and ensuring schools have the information and assistance they need.

"As investigations continue, we will keep schools, parents, carers, elected members and the wider public informed as more information becomes available."

Townsend added last month's cyber-attack saw council officers disconnect 88 schools' internet access to "contain the threat, protect school systems and reduce the risk of harm".

As of Wednesday evening, 84 of the 88 affected schools in last month's attack had resumed limited internet access, including all 39 schools directly supported by the council's IT service.

Work continues with the remaining schools to complete the necessary checks before reconnection.

Follow BBC Bristol on Facebook, X and Instagram. Send your story ideas to us on email or via WhatsApp on 0800 313 4630.