West Lothian Council Hit by Sophisticated Ransomware Cyberattack

West Lothian Council's education network was the victim of a sophisticated ransomware cyberattack on Tuesday 6 May. The council has now confirmed that a small percentage of the overall data stored on the education network has been stolen, with some personal or sensitive data among the information stolen by criminals. The council is working with Police Scotland and the Scottish Government to investigate the incident and has informed parents and staff at affected schools. The education network remains isolated from the rest of the council's networks, and contingency arrangements are in place to minimize disruption to education.

Key Takeaways:

  • The cyberattack occurred on Tuesday 6 May, with a small percentage of data stolen from the education network.
  • Some personal or sensitive data is among the information stolen by criminals, with a risk assessment conducted on potential child protection issues at affected schools.
  • The council's corporate and public access networks remain unaffected, with no evidence of data breaches in areas such as pupil records, financial data, and social work records.
  • The council is contacting parents and staff at affected schools to advise on taking extra precautions and provide guidance on reporting any incidents.
  • Parents are urged to be extra vigilant and change their passwords to ensure strong and unique credentials.
  • The council is working with the Scottish Government and Police Scotland to investigate the incident.

Statistics:

  • The cyberattack occurred on Tuesday 6 May.
  • A small percentage of data (only 1 sentence) was stolen from the education network.
  • The council has informed parents and staff at all 55 schools in West Lothian.
  • The education network remains isolated from the rest of the council's networks for an unknown duration.
  • Contingency arrangements are in place to minimize disruption to education.

Sources:

  • West Lothian Council News Release: [https://www.westlothian.gov.uk/cyberatherine](https://www.westlothian.gov.uk/cyberatherine)
  • Cyber Scotland: Choosing strong and separate passwords: [https://www.cyberScotland.org.uk/passwords](https://www.cyberScotland.org.uk/passwords)
  • National Cyber Security Centre: Data breaches: guidance for individuals and families: [https://www.ncsc.gov.uk/cyber-breaches-guidance](https://www.ncsc.gov.uk/cyber-breaches-guidance)
  • Cyber and Fraud Hub: Free Hotline: 0808 2813580