Pilton Community College

Pilton Community College is a UK-based educational institution providing secondary education to the local community. It delivers teaching and learning services, relying on digital platforms for curriculum delivery and administrative functions. The college supports a range of student activities and provides resources for both academic and pastoral care. It employs teaching and non-teaching staff whose personal and payroll data are held within its IT systems.

The college was one of 14 schools targeted in a ransomware attack by the Vice Society group in September 2022, indicating its presence within a broader network of UK educational providers. A separate incident in July 2022 saw the same group leak sensitive student data from Pilton Community College after unsuccessful ransom attempts. In both attacks, the attackers exfiltrated highly sensitive information, including children's SEN records, passport scans, staff payroll details, and contractual documents. The stolen data was subsequently published on the dark web following the failure to meet extortion demands. The breaches caused operational disruptions, notably IT system outages that forced the college to rely on alternative communication channels. Teaching resources dependent on digital platforms were affected, disrupting normal lesson delivery. In response, the institution engaged cybersecurity specialists to restore systems, conduct forensic analysis, and implement protective measures. Affected individuals were notified, and the college cooperated with law enforcement and data protection authorities to investigate the incidents. The episodes highlight the targeting of educational entities with limited cybersecurity resources by financially motivated threat actors.