Second Cyberattack on Bristol Primary School Exported Records, Council Says

Summary
A second attack on Southville Primary School reportedly exported records. An earlier attack disrupted the shared network at 88 Bristol schools; 84 had limited internet access restored by Oct. 14. Investigations continue.
Key points
- The council says records were exported in a second attack on Southville Primary School’s management information system; the types of records and full impact have not been disclosed.
- The first attack, detected on Sept. 21, breached the schools network and installed malicious software on some devices. Affected schools were disconnected by Sept. 25.
- The same criminals are believed to be behind both attacks, but this attribution is unconfirmed.
- The council reported the breach to the Information Commissioner and notified affected parents and carers; cyber experts and law enforcement are investigating.
- As of Oct. 14, 84 of the 88 affected schools had limited internet access restored, while checks continued at the remaining schools.
- Disruption affected school work including teaching, pupil registration, printing, and communication with families.
Article Details
- Victim Organization
- Southville Primary School
- Incident Type
- Cyber attack resulting in a data breach; records were exported.
- Disclosure Date
- 2026-10-15
- Operational Impact
- The second attack affected Southville Primary School’s management information system. The separate first attack disrupted internet access and school work across 88 schools, including planning, teaching, pupil registration, printing, and communications with parents and carers.
- Claim Status
- confirmed
