Bristol warns schools and families after stolen files appear online

Bristol City Council has warned that approximately 320,000 files may have been stolen from its schools’ IT network and published online, following a cyberattack identified in September 2026. The authority says 39 schools could be affected by the data theft.

Bristol City Hall. Image: Bristol City Council.

Council officers received information about the publication on 30 October and notified the potentially affected schools that day. Parents and carers were informed through schools on 3 November. Investigators have yet to establish exactly which information, schools or individuals are involved.

The council disconnected 88 schools from the network after identifying the attack. Schools have remained open throughout the disruption. Police, the South West Regional Organised Crime Unit and cyber security specialists are examining the incident, and the Information Commissioner’s Office has been notified.

The council is advising families and staff to avoid searching for the stolen material and to be cautious about unexpected emails, texts and calls. It recommends unique passwords and multi-factor authentication, where available, and says anyone with concerns should contact their school. Safeguarding risks remain under assessment.

Sources: Bristol City Council incident information · Tes report, 4 November