In a troubling development for education in Scotland, West Lothian Council has disclosed the names of the twelve schools impacted by a significant cyber attack in May. An alarming breach, it has resulted in sensitive information being exposed, raising concerns about student safety and data security.
West Lothian Council reported that social work documentation, along with other agency reports, was compromised during the ransomware assault. "Only a very small proportion of the files compromised were of a personal and sensitive nature," said a council spokesperson. However, the local authority recognized the potential for more serious implications, stating it was, "possible that names and addresses of pupils were taken".
"Only a very small proportion of the files compromised were of a personal and sensitive nature,"

The schools affected primarily include secondary institutions, and the local police department is currently investigating the incident. In light of the attack, parents have been advised to be particularly cautious of phishing attempts and potential scams targeting them or their children. The council stressed the seriousness of the situation and the importance of guarding against follow-up cybercrimes.
By the Numbers
By the Numbers
By the Numbers
As part of the response, West Lothian Council reached out to individuals deemed at risk due to the compromised social work records. In a recent update posted on its website, the council indicated, "Individuals at risk have already been contacted," ensuring that appropriate measures are being taken to address the fallout.
"Individuals at risk have already been contacted,"

There are specific schools affected, which include Armadale Academy, Bathgate Academy, and Whitburn Academy, among others. The complete list includes:
- Armadale Academy - Bathgate Academy - Broxburn Academy - Deans Community High School - Inveralmond Community High School - James Young High School - Linlithgow Academy - St Kentigern's Academy - St Margaret's Academy - West Calder High School - Whitburn Academy - Holy Family Primary
The incident was initially flagged when West Lothian Council was alerted to a scanned passport online, which set off an investigation into potential breaches of sensitive data. The council has urged members of the community to remain alert, as the stolen data could facilitate further criminal activities, including more phishing attacks. "Changing passwords and ensuring new ones are strong and unique is also recommended," noted the council's guidance issued to the public.
"Changing passwords and ensuring new ones are strong and unique is also recommended,"
In the wake of the attack, parents are encouraged not to inundate the schools or the council's customer support line with inquiries, as the authority has stated that they do not possess any further details at this time. Instead, for those who may feel affected by the breach, the Cyber and Fraud Hub has been designated as the point of contact.
As this situation develops, West Lothian Council has promised to keep the public informed with further updates on their website. The ongoing issue poses serious questions about cybersecurity in educational institutions and the measures in place to protect sensitive information from malicious actors.
Looking Ahead
Looking Ahead
With the rise of cyber threats targeting schools, the recent event in West Lothian underscores the necessity for enhanced security protocols within educational frameworks. Authorities must remain vigilant to deter similar incidents in the future and safeguard the information of students and their families.

