Cyber Attack Disrupts L&Q Services, Exposes Resident Communications
L&Q, a £1 billion-turnover social housing provider, is working to restore its online services following a cyber attack that compromised communications from approximately 12,000 residents. The incident, detected by the organization’s information security team, led to unauthorized access of emails and webforms submitted through L&Q’s website.
Upon discovery, L&Q immediately isolated its systems to contain the breach and launched a full investigation. The organization has notified both the Information Commissioner’s Office (ICO) and the Regulator of Social Housing. According to Fiona Fletcher-Smith, L&Q’s chief executive, the breach appears limited to resident-submitted contact data, with no evidence that broader systems including personal details, tenancy records, or supplier information were affected.
While the investigation continues, L&Q’s website remains offline, and residents have been directed to use alternative contact methods, such as phone or email. The provider has not disclosed the nature of the attack or the timeline for full service restoration.
L&Q TPRM report: https://www.rankiteo.com/company/london-&-quadrant
"id": "lon1790599464",
"linkid": "london-&-quadrant",
"type": "Cyber Attack",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '12,000 residents',
'industry': 'Housing',
'name': 'L&Q',
'size': '£1 billion turnover',
'type': 'Social Housing Provider'}],
'customer_advisories': 'Residents directed to use alternative contact methods '
'(phone or email)',
'data_breach': {'number_of_records_exposed': '12,000',
'sensitivity_of_data': 'Resident-submitted contact data',
'type_of_data_compromised': 'Emails and webforms'},
'description': 'L&Q, a £1 billion-turnover social housing provider, '
'experienced a cyber attack that compromised communications '
'from approximately 12,000 residents. The incident led to '
'unauthorized access of emails and webforms submitted through '
'L&Q’s website. The organization isolated its systems to '
'contain the breach and launched an investigation. The breach '
'appears limited to resident-submitted contact data, with no '
'evidence of broader system impacts.',
'impact': {'data_compromised': 'Resident-submitted contact data (emails and '
'webforms)',
'operational_impact': 'Website offline, alternative contact '
'methods required',
'systems_affected': 'Online services, website'},
'investigation_status': 'Ongoing',
'regulatory_compliance': {'regulatory_notifications': 'Information '
'Commissioner’s Office '
'(ICO), Regulator of '
'Social Housing'},
'response': {'communication_strategy': 'Residents directed to use alternative '
'contact methods',
'containment_measures': 'Systems isolated',
'incident_response_plan_activated': 'Yes'},
'title': 'Cyber Attack Disrupts L&Q Services, Exposes Resident Communications',
'type': 'Data Breach'}