Short answer
Equipple, an app many Northern Ireland schools use to book parent-teacher meetings, found unauthorised access to part of its cloud-hosted environment. Schools told parents that contact details and some pupil information may have been accessed, and warned them to watch for unexpected contact.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Equipple |
|---|---|
| Incident type | Data breach |
| Status | Confirmed by the organization |
| Sector | Education technology |
| Country | United Kingdom (Northern Ireland) |
| Disclosed | 2026-11-06 |
| People or records affected | An app used by almost 50,000 people in Northern Ireland; the number actually affected has not been published |
What data was exposed
- Parent or carer telephone number, home address and email address, per a school email to parents
- Pupil name, date of birth and registration group, per the same email
What happened
Equipple, the booking app many Northern Ireland schools use for parent-teacher meetings, reported unauthorised access to part of its cloud-hosted environment. BBC News NI reported on 6 November 2026 that the app has almost 50,000 users and that parents are being told to stay alert for suspicious contact.
Equipple told the BBC it activated its incident response procedures, informed schools immediately and secured the affected systems. It says it has added safeguards with outside cybersecurity specialists and has found no evidence of any ongoing unauthorised access. The investigation continues.
What data was involved
An email from one school to parents, seen by the BBC, lists the information that may have been accessed. For parents and carers: telephone number, home address and email address. For pupils: name, date of birth and registration group. The email said the access lasted a very short time and was identified immediately.
The BBC and DataBreaches.net both describe concerns about parent contact details and some pupil information. No financial data was mentioned in the reports, and Equipple has not published how many people were affected.
What schools are doing
The incident was referred to the Education Authority’s information governance team, which is advising schools on their data protection obligations. Schools are writing to parents directly and reviewing whether more security measures are needed. Parents were advised to watch for unexpected emails, phone calls or other communications that refer to them, their child or the school.
Scam risks for parents
A phone number, address and child’s school give a scammer enough to sound credible. A caller can say they are from the school office and ask for a payment, a trip fee or card details. A child’s date of birth and registration group can also make a message look genuine to a young person.
Check any such request by calling the school on a number you already hold, not one given in the message. Our data breach checklist lists the steps to take after an exposure, and the phishing messages guide shows how to check a suspicious email or text. For fake calls that pressure you to act, see our vishing guide.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Calls or texts that use your child's name and school to sound like the school office, asking for payments or card details.
- Phishing emails that claim to be from Equipple or the school and ask you to log in to 'secure' your booking.
- Messages aimed at a child that use their date of birth or registration group to appear genuine.
What to do if you are affected
- 01Read the email or letter your child's school sends and follow its instructions.
- 02Treat unexpected emails, calls or messages that mention you, your child or the school with suspicion, as the schools advise.
- 03Do not click links or give payment details in an unsolicited school message. Call the school on a number you already know.
- 04Change your Equipple password if you reused it elsewhere, and change it on those other accounts.
- 05Tell older children not to respond to unknown contacts that know their school or birthday.
Frequently asked questions
What is Equipple?
BBC News NI describes it as an app used by many schools to schedule and book meetings between parents and teachers, with about 50,000 users in Northern Ireland.
What data may have been accessed?
A school email seen by the BBC lists parent or carer telephone number, home address and email address, and pupil name, date of birth and registration group.
Is the attacker still in the system?
Equipple told the BBC it found no evidence of any ongoing unauthorised access. It says it secured the affected systems and added safeguards with outside cybersecurity specialists, and its investigation continues.
How long did the access last?
The school email described access over a very short period of time that was immediately identified. The total number of people affected has not been published.
Who is advising schools?
The Education Authority's information governance team is advising schools on their data protection duties, and schools are writing to families directly.
Sources
- Parents warned to be on alert after school data breach, BBC News NI (via Yahoo News), 2026-11-06
- NI: Parents warned to be on alert after school data breach, DataBreaches.net, 2026-11-06
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.