Glasgow City Council hit by cyber attack which 'may have involved theft of customer data'

Daily Record

6 hours ago

Police are involved in the investigation into the malicious attack.
A Scots council has been hit by a "malicious" cyber attack which may have involved the theft of customer data.
Glasgow City Council confirmed it is investigating the incident alongside Police Scotland. The disruption began during the early hours of Thursday, June 19, where the local authority's ICT supplier discovered malicious activity on servers managed by a third-party supplier.
‌
Bosses have been forced to take a number of servers offline as a result. A range of day-to-day digital services will be impacted in the meantime.
‌
Glasgow City Council has apologised for the anxiety and inconvenience this incident and the necessary response to it will undoubtedly cause.
At this stage, bosses cannot confirm whether any customer data has actually been removed and if so, what that data is.
As a precaution, the council is operating on the presumption that data related to the currently unavailable web forms may have been exfiltrated.
No council financial systems have been affected in this attack and no details of bank accounts or credit/debit cards processed by those systems have been compromised.
Join the Daily Record WhatsApp community!
Get the latest news sent straight to your messages by joining our WhatsApp community today.
You'll receive daily updates on breaking news as well as the top headlines across Scotland.
No one will be able to see who is signed up and no one can send messages except the Daily Record team.
All you have to do is click here if you're on mobile, select 'Join Community' and you're in!
If you're on a desktop, simply scan the QR code above with your phone and click 'Join Community'.
We also treat our community members to special offers, promotions, and adverts from us and our partners. If you don't like our community, you can check out any time you like.
To leave our community click on the name at the top of your screen and choose 'exit group'.
If you're curious, you can read our Privacy Notice.
Email communication with the council remains safe - although, as always, you should be suspicious of any email which asks you to provide bank account details, passwords or other secure information.
‌
The council will never ask you for details like that by email.
Security specialists reviewing this incident have confirmed that it was not caused by email.
Affected services include:
Planning - online access to planning applications is unavailable.
Penalty Charge Notices - citizens are unable to access contravention evidence, make payments or submit online appeals.
Pensions - members are unable to access the SPFOnline portal.
Registrars - citizens are unable to book appointments online.
Revenues and Benefits - citizens are unable to book callback appointments online.
‌
The following online forms and calendars are also unavailable:
Permits
Complaints
Certificate Online (births, deaths, marriages)
Comments and Compliments
FOI Requests
Application for Footway Crossing (dropped kerbs)
Elections
Planning Enforcement
Planning Statutory Enforcement
Public Processions
Future Processions
Sign Language Interpreter Service (SLIS)
Glasgow Film Office Location Library
Pupil Absence
Bin Calendar
Taxi Complaints Form
Council Diary
If you are contacted by someone claiming to have your data, you should contact Police Scotland on 101 or call the Cyber Incident Response Helpline on 0800 1670 623. You can also report this in person at any police station.