Powys Council Reports Unauthorized Access to Data at One School
Summary
Powys County Council says an incident identified in April 2026 led to unauthorized access to personal data linked to one school. The incident was contained, schools remain operational, and the investigation continues.
Key points
- The council says it identified the incident in April 2026 and quickly contained it.
- Early findings indicate that personal data connected to one school was accessed without authorization.
- Pupils, staff and others connected to the school may be affected; the full scope is still being determined.
- The council says it secured systems and is contacting affected individuals with advice.
- Schools remain open, with no evidence of disruption to education provision.
Article Details
- Victim Organization
- Powys County Council
- Victim Domain
- en.powys.gov.uk
- Incident Type
- Cyber incident involving unauthorised access to personal data from one school’s systems
- Disclosure Date
- 2026-06-04
- Data Types Exposed
- Personal data relating to pupils, staff, and others connected to one school; specific data types were not disclosed
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The incident was contained quickly and systems were secured. Schools remain open and operational, with no evidence of disruption to education provision.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed