Police investigate as school suffers ‘serious cyberattack’

A Scottish high school has been the target of a “serious cyberattack” with the personal information of staff and students released.

Staff emails were accessed and the accounts used to circulate files and data from Brechin High School in Brechin, Angus.

A document containing the emergency contact details of more than 1800 pupils was released along with profiles detailing those with ADHD or other barriers to learning, according to emails seen by STV News.

The attack, understood to have taken place in the early hours of Monday morning, was reported to police at 9.20am.

Angus Council confirmed the incident, which it described as “serious”, but would not comment further as police investigate.

Staff member’s personal passwords and SQA marks from last year were published in the attack.

The Information Commissioner’s Office is in contact with the school.

STV News understands the cyberattack is not the first of its kind to affect the school, with previous incidents taking place in 2018, 2019, and earlier this month.

Emails also show that the school was targetted with a key logging device – which can be used to steal logins and passwords from computers – in 2019.

An Information Commissioner’s Office spokesperson said: “People have the right to expect that organisations will handle their personal information securely and responsibly. If an individual has concerns about how their data has been handled, they should raise it with the organisation first, then report them to us if they are not satisfied with the response.”

“We have been in contact with Brechin High School and are awaiting the outcome of its investigation.”

A Police Scotland spokesperson said: “We have received a report and enquiries are ongoing. The incident was reported to police around 9.20am on Monday.”

A spokesperson for Angus Council said: “We can confirm that Brechin High School has been the subject of a serious cyberattack.

“This is now a matter for Police Scotland and as a result we cannot comment further.”