More than 320,000 files from 39 Bristol schools published on dark web

More than 320,000 files stolen from 39 Bristol schools have been published on the dark web, according to the BBC. The files were taken during a September 2026 cyberattack on Trading with Schools (TwS), a Bristol City Council service that provides schools with shared IT infrastructure and administrative support.

The council said specialist investigators found that a significant number of files believed to have been taken from the network had been published online. It has not confirmed which schools or individuals were affected, or what the files contain. Officers are auditing the published material to establish the scope of the theft.

The council first suspected foul play on September 21 and shut down TwS on September 25. An initial investigation found malware on the system and a breach affecting 87 schools. At the time, council leader Tony Dyer told the BBC that investigators had found no evidence that data was stolen. The council has since notified Avon and Somerset Police and the Regional Organised Crime Unit, and brought in specialist cybersecurity advisers.

Bristol City Council is warning students, parents and school staff to be alert to unexpected emails, texts and calls that could be phishing attempts or scams. It says the investigation is ongoing, and the nature of the stolen data remains unknown.