London Borough and London Borough: The lessons to be learned from a cyber attack that has disrupted two councils’ planning services for months

Cyber Attack Disrupts London Boroughs’ Planning Services for Months

In November, two London boroughs suffered a cyber attack that continues to impact their planning services. The incident has highlighted vulnerabilities in councils’ legacy IT systems, which commentators warn could lead to significant disruptions for both local authorities and developers.

The attack has left the affected boroughs in recovery mode for months, underscoring the risks posed by outdated infrastructure. While details on the specific nature of the breach remain limited, the prolonged disruption serves as a reminder of the potential consequences of cyber threats on public sector operations.

The incident has prompted discussions about the need for improved cybersecurity measures in local government to prevent similar disruptions in the future.

Source: https://www.planningresource.co.uk/article/1947520/lessons-learned-cyber-attack-disrupted-two-councils-planning-services-months

London Borough of Lambeth cybersecurity rating report: https://www.rankiteo.com/company/london-borough-of-lambeth

"id": "LON1770317017",
"linkid": "london-borough-of-lambeth",
"type": "Cyber Attack",
"date": "11/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Local authorities and '
                                              'developers',
                        'industry': 'Public Sector',
                        'location': 'London, UK',
                        'type': 'Local Government (Borough Council)'},
                       {'customers_affected': 'Local authorities and '
                                              'developers',
                        'industry': 'Public Sector',
                        'location': 'London, UK',
                        'type': 'Local Government (Borough Council)'}],
 'date_detected': '2023-11',
 'description': 'In November, two London boroughs suffered a cyber attack that '
                'continues to impact their planning services. The incident has '
                'highlighted vulnerabilities in councils’ legacy IT systems, '
                'which commentators warn could lead to significant disruptions '
                'for both local authorities and developers. The attack has '
                'left the affected boroughs in recovery mode for months, '
                'underscoring the risks posed by outdated infrastructure.',
 'impact': {'downtime': 'Months',
            'operational_impact': 'Significant disruptions for local '
                                  'authorities and developers',
            'systems_affected': 'Planning services'},
 'lessons_learned': 'Highlighted vulnerabilities in councils’ legacy IT '
                    'systems and the need for improved cybersecurity measures '
                    'in local government.',
 'post_incident_analysis': {'root_causes': 'Outdated infrastructure and legacy '
                                           'IT systems'},
 'recommendations': 'Improve cybersecurity measures in local government to '
                    'prevent similar disruptions in the future.',
 'response': {'recovery_measures': 'Ongoing recovery mode'},
 'title': 'Cyber Attack Disrupts London Boroughs’ Planning Services',
 'type': 'Cyber Attack',
 'vulnerability_exploited': 'Legacy IT systems'}