West Lothian Council says personal data stolen in cyberattack on education network

Sofia Villegas May 27, 2025 in Education and skills, News - 3 Minutes

Having initially indicated that there was no evidence of data theft, the Scottish authority has acknowledged that information, including that of a ‘personal and sensitive’ nature, was accessed by criminals

West Lothian Council has confirmed cybercriminals stole “personal and sensitive data” during a ransomware attack on its education network earlier this month.

On 6 May, the local authority was hit by an attack and the incident remains the subject of a live criminal investigation. Initially the council said there was “no evidence” of data theft, but it has now confirmed a “small percentage” of information was stolen.

The council has contacted parents and carers as well as education staff across the region to inform them of the theft. It said most of the data taken related to operational issues for schools such as lesson plans, but confirmed some personal information was also stolen.

Financial data, social work records and pupil records are stored in different systems and are believed to be safe, the council said.

Related content

A statement from the authority read: “Only a small amount of the overall data held on our education servers was stolen, and the majority of information held on them relates to operational issues for schools, such as lesson plans, that do not contain any personal details. We are aware that some personal or sensitive data is among the information stolen by criminals. Risk assessment has been carried out on any potential child protection issues at each of the schools affected, and appropriate action already taken if required.”

The council has urged residents to “be extra vigilant”, warning stolen data might be used for further criminal activities such as phishing attacks. It recommended people to change their passwords.

The statement continued: “We will share any further updates as soon as we have them. We would ask parents/carers not to contact their school or our customer contact centre regarding the cyberattack, as they do not have any more details than this at this stage. Any individual who has evidence that they have been the victim of a crime should contact Police Scotland on 101.”

Contingency plans were in place following the attack, to ensure schools remained open with “minimal disruptions”.

The West Lothian Council area sits between Edinburgh to the east and Glasgow to the west, and is home to almost 200,000 people in towns including Livingstone, Bathgate, and Linlithgow.