West Lothian Council has confirmed that “personal and sensitive” data was stolen in a sophisticated ransomware cyber attack targeting its education network on Tuesday, May 6.
The attack, now under Police Scotland investigation, has prompted an urgent communication campaign to parents and carers across all 143 West Lothian educational institutions—including 13 secondary schools, 69 primary schools, and 61 nurseries.
What Was Stolen?
The council said:
- A percentage of overall educational network data was accessed and stolen.
- While most of the stolen material relates to school operational issues (like lesson plans), it did include personal or sensitive information.
- Confidential pupil records, financial data, and social work records were not affected, as they are stored on separate systems.
A council spokesperson stated:
“We would like to offer our sincere apologies to anyone potentially affected by this criminal cyberattack.”
Impact & Ongoing Response
- The education network remains isolated from the rest of the council’s infrastructure.
- SQA exams and daily operations have continued with minimal disruption thanks to contingency plans.
- Schools are not to be contacted for more information, as staff have no further details at this time.
Parents are advised to remain extra vigilant, as stolen data may be used in phishing scams or fraud.
Police Scotland Statement
A Police Scotland spokesperson confirmed:
“We received a report of a cyber incident in the West Lothian area on Tuesday, May 6, 2025. Enquiries are ongoing and we are providing support to those affected.”
Anyone believing they have been a victim of crime in relation to this attack is advised to contact Police Scotland on 101.
What Parents Should Know
- Do not contact schools or council helplines for further details—they cannot provide additional information.
- Monitor for phishing emails, suspicious links, or unusual messages that may exploit stolen data.
- Secure personal devices and change passwords where applicable.
