‘Small percentage’ of personal data stolen in cyberattack, council says

A “smell percentage” of data stored on a council’s education network, including personal data, was stolen in a recent cyberattack, according to local authority bosses.

On May 6, West Lothian Council experienced a “sophisticated” ransomware attack from a group of unknown cyber-assailants.

This led to the authority’s education network being isolated from its wider systems.

The council said on Wednesday that while the majority of data stolen relates to operational issues for schools, such as lesson plans, some personal or sensitive data had been hijacked.

The council said a risk assessment on any child protection issues had been carried out.

In an email sent to parents and carers, the council said: “Only a small percentage of the overall data held on our education servers was stolen, and the vast majority of information held on them relates to operational issues for schools, such as lesson plans, that do not contain any personal details.

“We are aware that some personal or sensitive data is among the information stolen by criminals.

“Risk assessment have been carried out on any potential child protection issues, and appropriate action already taken, if required.

“This remains a live criminal investigation, and we are working with all relevant external agencies, including Police Scotland and the Scottish Government.”

The council says the education network remains separate from its other systems, and work had been carried out to ensure there was minimal disruption to education, including SQA exams.

The council added: “As a precaution, everyone should be extra vigilant and be aware that there remains the possibility that any stolen data might be used for further criminal activity, such as phishing attacks or other scams.”

A Police Scotland spokesperson said: “On Tuesday, 6 May, 2025, we received a report of a cyber incident in the West Lothian area.

“Enquiries are ongoing and we are providing support to those affected.”

A Scottish Government spokesperson said: “Scottish ministers are aware of this incident in West Lothian and are monitoring the situation.

“West Lothian Council is being supported by the Scottish Cyber Coordination Centre and Police Scotland, through the Scottish Government’s multi-agency support mechanism.

“Investigations are ongoing, and it would not be appropriate to comment further on a live criminal investigation.”