The exposed material covers scheduling, lesson plans, staff details, and payroll. Educational psychology files belonging to children may also be among the stolen data. Bristol City Council confirmed the files came from those 39 schools, which relied on the platform for day-to-day operations after it was hacked in September.
Malicious software got into the platform on . The council became aware four days later and shut the system down on , an action that touched all 88 schools under its umbrella. Forty-nine of them had only bought internet services. The other 39 used the system for daily tasks, and since the shutdown some have lost phone access while teachers work longer hours to keep lessons running.
How Stolen School Data Ends Up Online
Dr. John Curry, a cyber security reader at Bath Spa University, described the usual path. Criminal groups extract the data and pass it to brokers, who then look for ways to profit from it. Criminals might chop it up into chunks
, Dr. Curry said, and sell the pieces for blackmail or financial fraud. Once the data has been sold on, it is often dumped publicly, which doubles as proof of capability for the next job.
Vik Verma, Bristol’s director of education, acknowledged the distress this is causing. The council’s investigation is focused on identifying affected individuals and their families, and it is giving advice to schools, parents, and staff. The South West Regional Organised Crime Unit is investigating the attack, while council officers continue a rapid review of exactly what was published.
What Families and Staff Are Being Told to Do
Anyone connected to the affected schools should treat unexpected contact with suspicion:
- Be cautious of unexpected messages, and do not click suspicious links or open attachments
- Be wary of any request for personal or financial details
- Use strong, unique passwords and turn on two-factor authentication for online accounts
- Check bank statements regularly for unusual activity
Hashlytics Take
The split between 49 internet-only schools and 39 fully dependent ones explains the damage better than the file count does. The schools that leaned hardest on one council-run platform are the ones now exposed, and the shutdown that was supposed to contain the attack has cost them phones and teacher hours on top of the leak. Shared infrastructure saves money until it becomes a single point of failure for dozens of schools at once. The dump also changes the risk for families. A leaked password can be reset, but an educational psychology file about a child cannot be recalled, and it will stay valuable to fraudsters for years. Until the council finishes its review, nobody outside it knows which children’s records are in that pile.
Follow Hashlytics on Bluesky, Facebook, LinkedIn , Telegram and X to Get Instant Updates
