Schools across the UK are reeling after a cyberattack exposed the personal details of thousands of staff. Teachers and support workers have been told their names, addresses, phone numbers, and even passport and National Insurance details may have been compromised.
The incident stems from a malicious attack on Intradev, the software supplier behind the Single Central Record (SCR) system used by over 1,500 schools. This database holds vital pre-employment checks on staff — meaning sensitive data was left exposed when hackers gained access in early August.
Why this matters
Data security experts warn the breach creates a higher risk of phishing, fraud and identity theft. Criminal groups have already claimed to have stolen data, and staff have been urged to watch out for suspicious calls, emails and messages.
Under UK data protection law, organisations must report high-risk data breaches within 72 hours and inform those affected without delay. In this case, many staff say they were told weeks after the breach occurred — prompting anger and calls for accountability.
To stay safe, affected staff should:
- Be cautious of suspicious emails or calls
- Avoid clicking on unexpected links
- Change passwords and enable two-factor authentication
- Consider credit or identity protection services
Will staff get data breach compensation?
Affected staff may have the right to bring claims under data protection laws. Specialists also warn that if schools failed to carry out a proper Data Protection Impact Assessment (DPIA) before contracting with SCR — this failure could leave them exposed to legal action.
What you can do if you’re affected
If your details were held in the SCR system, you could be entitled to compensation for:
- The loss of your personal data
- The stress and inconvenience caused by the breach
- Any financial harm linked to fraud or identity theft
We are keeping a close eye on this case and will let you know if a law firm launches a legal action.
Join the Claim connects consumers with SRA-regulated lawyers. Keep an eye out for updates on any potential claim and possible eligibility checks/registration opportunities.
