Powys Council Confirms Personal Data Accessed in School Cyber Incident
Summary
Powys County Council confirmed that personal data linked to an unidentified school was accessed in an incident identified in April 2026. The incident was contained; the investigation continues, and the extent of the breach is unknown.
Key points
- Powys County Council confirmed that personal data linked to one school was accessed.
- The incident was identified in April 2026 and the council says it was contained quickly.
- The affected school, data types and number of people affected have not been disclosed.
- An investigation with specialist cybersecurity support is underway, and affected people are being contacted where necessary.
- Schools remain open, with no current evidence of disruption to teaching or learning.
Article Details
- Victim Organization
- Unidentified school in Powys
- Incident Type
- Cybersecurity incident involving unauthorized access to personal data
- Data Types Exposed
- Personal data relating to pupils, staff, and others connected to the school; specific data types were not disclosed
- Affected Records
- Not disclosed
- Operational Impact
- The incident was contained quickly and action was taken to secure systems. Schools remain open and operational, with no current evidence of disruption to teaching or learning.
- Claim Status
- confirmed