Powys County Council is responding to a cyber security incident affecting some school systems, which has resulted in unauthorised access to some personal data.
The incident was initially identified in April 2026 and was contained quickly. Immediate and robust action was taken to secure systems and limit further impact. Specialist experts and partners are supporting a detailed and ongoing investigation.
Early findings confirm that some personal data relating to pupils, staff and others connected to the school has been accessed from one school. Work is ongoing to fully understand the scope of the incident and identify all those affected.
Cllr Raiff Devlin, Cabinet Member for Customers, Digital and Community Services and Cllr James Gibson-Watt, Cabinet Member for a Learning Powys, said:
“We understand that this incident will be very concerning for parents, staff and the wider community. We want to reassure people that immediate action was taken to secure systems, and a full investigation is underway with specialist support.
“We are contacting affected individuals directly where necessary and providing advice on steps they can take to protect themselves.
“The safety and wellbeing of pupils and staff remain our absolute priority, and we are committed to being transparent as our investigation progresses and will continue to support our schools throughout.”
Schools remain open and operational, and there is no evidence of disruption to education provision.
