Skip to content

Schools affected by West Lothian cyber attack revealed

Getty Images An anonymous pair of male hands hover over a laptop keyboard. A tablet with green writing is to on-side of the laptop.Getty Images

Social work reports are among the data that has been stolen in a cyber attack on 12 Scottish schools.

West Lothian Council has confirmed for the first time the individual schools impacted by a ransomware attack in May.

The local authority said reports shared by social work and other agencies were compromised and that it was also "possible" that names and addresses of pupils were taken.

The cyber attack, which mainly affects secondary schools, is under police investigation and parents have been urged to remain extra vigilant of phishing attacks or scams.

West Lothian Council said only a very small proportion of the files compromised were of a personal and sensitive nature.

The local authority said it was possible that names, addresses, email addresses and learning materials were amongst the data taken from the affected schools.

Individuals deemed at risk from the social work and other agency reports that have been compromised have already been contacted, the council said in a update on its website.

BBC Scotland News reported in May that a group called Interlock claimed it was behind the attack.

Such groups operate by using malicious software to encrypt an organisation's files, then demand a payment with a threat to publish the material online if no ransom is paid.

Which schools are affected by the West Lothian Council cyber attack?

The schools directly affected by the issue are:

  • Armadale Academy
  • Bathgate Academy
  • Broxburn Academy
  • Deans Community High School
  • Inveralmond Community High School
  • James Young High School
  • Linlithgow Academy
  • St Kentigern's Academy
  • St Margaret's Academy
  • West Calder High School
  • Whitburn Academy
  • Holy Family Primary
PA Media A green field with people playing football is in the foreground and in the background is a complex of two and three two storey grey buildings PA Media
Linlithgow Academy in Linlithgow is one of the schools that has been affected by the cyber attack

It is understood West Lothian Council was originally made aware of the sensitive data stolen after being alerted to a scanned passport online.

The council urged people to be vigilant in case the stolen data was used for further criminal activity such as phishing attacks or other scams.

Changing passwords and making sure the new ones are strong and unique is also recommended.

Parents are asked not to contact schools or the council's customer support line about the cyber attack, as they do not have any more details at this stage.

Anyone affected by cyber crimes should contact the Cyber and Fraud Hub.

The council said it would issue further updates on the attack on its website.