A cyber-attack on a sub-contractor exposed personal data of over 3,000 people across 30 schools in Oxfordshire and Swindon.

A cyber-attack on a sub-contractor, Intradev, compromised personal data of over 3,000 individuals across 30 schools in Oxfordshire and Swindon, part of the River Learning Trust. The breach, linked to a third-party supplier processing DBS checks, exposed names, dates of birth, addresses, national insurance numbers, passport and driving license details, though financial data was not stolen. Around 500 people had higher-risk data accessed. The trust, which did not operate the affected systems and was unaware of the sub-contractor arrangement, notified all impacted individuals and is consulting legal experts on liability and potential compensation. The incident is part of a larger national breach affecting over 350,000 people across 1,500 schools. Intradev contained the breach and restored systems, with investigations ongoing involving law enforcement.