The digital infrastructure of three London local authorities has been compromised this week following a series of coordinated cyber-attacks, prompting urgent security warnings for residents.
Councils Urge Vigilance After Data Theft
The Royal Borough of Kensington and Chelsea (RBKC), home to approximately 147,500 residents, has confirmed that data was successfully copied from its systems during the breach. While initial investigations suggest the stolen information consists of "historical data," the council is urgently working to determine if it contains any personal or financial details of those who live in or use its services.
In response, and with guidance from the National Cyber Security Centre (NCSC), RBKC has issued a stark warning. "We are encouraging all residents, customers, and service users to be extra vigilant when called, emailed or sent text messages," a council statement read.
Widespread Disruption Across the Capital
The cyber-assault has impacted a trio of boroughs, creating a wave of IT chaos. Alongside RBKC, Westminster City Council and the borough of Hammersmith and Fulham have also reported system failures, which have affected critical services, including public phone lines.
Hammersmith and Fulham confirmed it is "working around the clock" to restore its operations. RBKC has warned its residents to expect at least two weeks of significant disruption as teams work to bring systems back online securely.
National Crime Agencies Join the Investigation
Authorities are now pursuing the perpetrators. RBKC has confirmed it is collaborating with the National Cyber Security Centre, the National Crime Agency, and the Metropolitan Police to identify the assailants behind the attack.
This incident is part of a worrying national trend. In recent years, UK public bodies and private firms have been repeatedly targeted by ransomware gangs, often based in former Soviet states. These criminals use malware to lock IT systems and extract data, demanding cryptocurrency payments for its return.
While none of the three councils have explicitly confirmed a ransomware attack, the 2020 Hackney council breach serves as a sobering precedent. That attack encrypted 440,000 files and resulted in a formal reprimand from the UK's data watchdog.
Westminster and Hammersmith and Fulham have not yet disclosed whether data was stolen in their respective incidents.
Elizabeth Campbell, the Conservative leader of RBKC, defended the decision to alert the public promptly. "As a resident myself, I would want to know this information as soon as possible," she stated, "and then be able to make my own choices, follow advice and protect myself if I think necessary."
