Schools in Wales deal with cyber security attack

Personal data relating to pupils and staff from a school in Powys has been accessed during a cyber security incident that affected 13 schools across the region. The level of risk for each individual affected by the data breach "will vary" according to Powys Council. The incident was identified by Powys Council in April 2026 and is being investigated by the council who are working with specialists and partners, including the police and their Regional Organised Crime Unit. In total the council has identified 13 schools that were affected by the cyber security incident, but, based on the information available at this time, data was only taken at one of those schools. The council has not named the specific school or individuals due to the "sensitive nature" of the incident. Affected families and staff members are being contacted directly. For the biggest stories in Wales first sign up to our daily newsletter here A spokesperson for the council said: " We have identified a confirmed cyber security incident, detected in April 2026, involving unauthorised access to some school systems and personal data. "Early findings confirm that some personal data relating to pupils, staff and others connected to the school has been accessed from one school. "We are working with specialist experts and partners, including the police, to investigate how this happened and the full extent of the data involved. The safety and wellbeing of pupils and staff remain our absolute priority, and we are committed to being transparent as our investigation progresses and will continue to support our schools throughout. "Schools remain open and operational, and there is no evidence of disruption to education provision." The incident has been reported to the Information Commissioner's Office.