No evidence that data stolen in cyber attack on Glasgow City Council
The council said its ICT supplier CGI discovered 'malicious activity' on servers managed by a third-party supplier on Thursday June 19.
Police Scotland are involved in investigating the incident, along with the council, the Scottish Cyber Co-ordination Centre and the National Cyber Security Centre.
READ MORE: Glasgow to see more than 50 Orange Order walks on 'biggest day of year'
The council said that so far, joint investigations have not found any evidence of data being encrypted or exfiltrated (stolen).
However, until forensic examination of the affected servers is complete, it will continue to work on the presumption that data, which may include customer data, may have been lost.
The local authority said that no council financial systems have been affected in the attack and no details of bank accounts or credit/debit cards processed by those systems have been compromised.
Following the attack, the council isolated the affected servers to protect the wider network, which disrupted a number of day-to-day digital and online services.
Services supporting pensions and public Freedom of Information requests are now back online and the council said it is creating temporary solutions and workarounds for other services.
A statement from the council advised people to be on the alert.
It said: 'As part of our investigation, experts are monitoring online activity and, to date, there has been no evidence of any data being leaked or misused.
'However, until forensic examinations of the affected servers are complete – and we can be confident whether any data has been stolen – we are advising anyone who has used any of the affected forms to be particularly cautious about contact claiming to be from Glasgow City Council.
'If you are contacted by someone claiming to have your data, you should contact Police Scotland on 101.'
It added: 'We are sorry that this incident will have caused real anxiety to people who have used our online services – and frustration for those unable to access those services now.'
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Scotsman
2 hours ago
- Scotsman
Three men taken to Edinburgh hospital after police called to 'disturbance' at Broxburn property
Three men have been taken to hospital after police were called to a 'disturbance' in West Lothian. Sign up to the daily Crime UK newsletter. All the latest crime news and trials from across the UK. Sign up Thank you for signing up! Did you know with a Digital Subscription to Edinburgh News, you can get unlimited access to the website including our premium content, as well as benefiting from fewer ads, loyalty rewards and much more. Learn More Sorry, there seem to be some issues. Please try again later. Submitting... Emergency services descended on McCann Avenue in Broxburn at around 1.15am on Friday, July 4, following reports of a disturbance at a property. Three men aged 18, 25 and 28 were taken to Edinburgh's Royal Infirmary for treatment. The 28-year-old man was later arrested in connection with the incident. A Police Scotland spokesman said enquiries into the incident are still ongoing. He added: 'Officers remain in the area and anyone with concerns or information can approach them.'
Glasgow Times
6 hours ago
- Glasgow Times
Glasgow City Council say 'no evidence' data stolen in cyber attack
The local authority also said there has been 'no evidence of any data being leaked or misused' but advised people to be vigilant. The council said its ICT supplier, CGI, discovered 'malicious activity' on servers managed by a third-party supplier on Thursday, June 19. Police Scotland is involved in investigating the incident, along with the council, the Scottish Cyber Co-ordination Centre and the National Cyber Security Centre. The council said that so far, joint investigations have not found any evidence of data being encrypted or exfiltrated (stolen). READ NEXT: Glasgow flights cancelled amid air traffic control strike However, until forensic examination of the affected servers is complete, it will continue to work on the presumption that data, which may include customer data, may have been lost. The local authority said that no council financial systems have been affected in the attack, and no details of bank accounts or credit/debit cards processed by those systems have been compromised. Following the attack, the council isolated the affected servers to protect the wider network, which disrupted a number of day-to-day digital and online services. Services supporting pensions and public Freedom of Information requests are now back online, and the council said it is creating temporary solutions and workarounds for other services. A statement from the council advised people to be on the alert. READ NEXT: Eight Scots to be honoured with Elizabeth Emblem It said: 'As part of our investigation, experts are monitoring online activity and, to date, there has been no evidence of any data being leaked or misused. 'However, until forensic examinations of the affected servers are complete – and we can be confident whether any data has been stolen – we are advising anyone who has used any of the affected forms to be particularly cautious about contact claiming to be from Glasgow City Council. 'If you are contacted by someone claiming to have your data, you should contact Police Scotland on 101.' It added: 'We are sorry that this incident will have caused real anxiety to people who have used our online services – and frustration for those unable to access those services now.'
BBC News
7 hours ago
- BBC News
No evidence of stolen data in Glasgow cyber attack
Glasgow City Council has found no evidence of any data being stolen in a cyber attack that took a number of services offline in local authority also says there has been no sign of any data being leaked or misused after the incident, but advised people to remain services supplier CGI discovered malicious activity on servers managed by a third-party supplier on 19 June.A number of online services, including paying penalty charges and reporting school absences, became unavailable due to the council taking servers offline. No financial systems were affected by the attack and no details of bank accounts or credit/debit cards processed by those systems were compromised.A spokesperson for the council said: "As part of our investigation, experts are monitoring online activity and, to date, there has been no evidence of any data being leaked or misused."However, until forensic examinations of the affected servers are complete - and we can be confident whether any data has been stolen - we are advising anyone who has used any of the affected forms to be particularly cautious about contact claiming to be from Glasgow City Council."Some services, such as public freedom of information requests, can be accessed again while workarounds are being developed for other affected Scotland are involved in investigating the incident, along with the council, the Scottish Cyber Co-ordination Centre and the National Cyber Security Centre.A number of Scottish public bodies have been hit by cyber attacks in recent months, including a ransomware group targeting NHS Dumfries and Galloway last year which saw stolen files published online.
