Hackney Council has been targeted in a cyber-attack within the past 48 hours, prompting it to raise its cybersecurity threat level to 'critical'. The attack follows a 2020 breach where criminals encrypted 440,000 files, affecting 280,000+ residents and staff. Current reports indicate potential disruption to systems and services, with urgent internal memos warning staff about phishing risks and emphasizing the need to protect residents' data. The council has activated emergency response protocols, including business continuity measures, while collaborating with cyber specialists to restore services and mitigate damage. Previous failures in security (as reprimanded by the Information Commissioner’s Office) suggest vulnerabilities may persist. The attack aligns with a broader wave targeting multiple London councils, raising concerns over data integrity, service outages, and resident trust. While the full scope remains under investigation, the incident echoes past breaches with high-risk implications for municipal operations and personal data exposure.
Source: https://www.aol.com/articles/multiple-london-councils-hit-cyber-182658072.html
Connect2Hackney cybersecurity rating report: https://www.rankiteo.com/company/connect2hackney
"id": "CON4893848112625",
"linkid": "connect2hackney",
"type": "Cyber Attack",
"date": "6/2020",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"{'affected_entities': [{'industry': 'Public Sector',
'location': 'London, UK',
'name': 'Royal Borough of Kensington & Chelsea (RBKC)',
'type': 'Local Government'},
{'industry': 'Public Sector',
'location': 'London, UK',
'name': 'Hackney Council',
'type': 'Local Government'},
{'industry': 'Public Sector',
'location': 'London, UK',
'name': 'Westminster City Council',
'type': 'Local Government'},
{'industry': 'Public Sector',
'location': 'London, UK',
'name': 'Hammersmith & Fulham Council',
'type': 'Local Government'}],
'attack_vector': ['Phishing (suspected)', 'Network Intrusion'],
'customer_advisories': ['Residents urged to be patient (RBKC)',
'Warnings about potential service disruptions'],
'date_detected': '2024-02-13T00:00:00Z',
'date_publicly_disclosed': '2024-02-13T00:00:00Z',
'description': 'Several London councils—including the Royal Borough of '
'Kensington & Chelsea (RBKC), Hackney, Westminster, and '
'Hammersmith & Fulham—reported cyber-attacks within the past '
'48 hours, leading to IT system disruptions and service '
'outages. Hackney raised its cybersecurity threat level to '
"'critical,' while Westminster shut down all networks as a "
'precaution. RBKC and Westminster are investigating the cause '
'with cyber specialists. Hackney previously suffered a major '
'ransomware attack in 2020 affecting 440,000 files and '
'280,000+ individuals.',
'impact': {'brand_reputation_impact': ['Potential erosion of public trust',
"Historical context (Hackney's 2020 "
'breach)'],
'downtime': ['2–3 days (RBKC)', 'Ongoing (as of disclosure)'],
'operational_impact': ['Disrupted resident services',
'Activated business continuity arrangements '
'(Westminster)',
'Critical threat level (Hackney)'],
'systems_affected': ['IT systems',
'Networks (shut down in Westminster)',
'Resident contact services',
'Business continuity systems']},
'initial_access_broker': {'entry_point': ['Phishing (suspected)']},
'investigation_status': 'Ongoing (RBKC, Westminster, and cyber specialists '
'investigating)',
'lessons_learned': 'Mayor Sadiq Khan emphasized the need for improved '
'cyber-resilience among London councils, citing lessons '
'from past attacks (e.g., Transport for London, Marks & '
'Spencer, Heathrow Airport). The London Office of '
'Technology and Innovation and National Crime Agency are '
'supporting councils in bolstering safeguards.',
'recommendations': ['Enhance phishing defenses',
'Improve network segmentation',
'Strengthen business continuity plans',
'Collaborate with cybersecurity specialists',
'Conduct regular resilience audits'],
'references': [{'date_accessed': '2024-02-13',
'source': 'PA Media via BBC News',
'url': 'https://www.bbc.com/news/uk-england-london-68281234'},
{'date_accessed': '2024-02-13',
'source': 'Local Democracy Reporting Service (LDRS)'}],
'regulatory_compliance': {'regulatory_notifications': ['Information '
"Commissioner's Office "
'(historical, Hackney '
'2020 breach)']},
'response': {'communication_strategy': ['Public apologies (RBKC)',
'Internal memos (Hackney, '
'Westminster, Hammersmith & Fulham)',
'Social media updates (RBKC on X)'],
'containment_measures': ['Network shutdown (Westminster)',
'Business continuity arrangements '
'(Westminster)',
'Urgent phishing warnings (Hackney)'],
'incident_response_plan_activated': True,
'law_enforcement_notified': ['Metropolitan Police (approached '
'for comment)'],
'remediation_measures': ['Investigation into root cause',
'System restoration (RBKC)'],
'third_party_assistance': ['Cyber specialists (unspecified)']},
'stakeholder_advisories': ['Internal memos to staff (Hackney, Westminster, '
'Hammersmith & Fulham)',
'Public statements (RBKC on X)'],
'title': 'Cyber-attacks on Multiple London Councils (2024)',
'type': ['Cyber-attack', 'Phishing (suspected)', 'IT Disruption']}