technology
local
update

London councils face major cyber attack affecting residents' data

Nov 25, 2025, 9:05 PM10
(Update: Nov 25, 2025, 9:05 PM)
district within the Royal Borough of Kensington and Chelsea in central London
city in Suffolk County, Massachusetts, United States

London councils face major cyber attack affecting residents' data

  • Multiple London councils, including the Royal Borough of Kensington and Chelsea and Westminster City Council, experienced a cyber attack.
  • The councils have alerted the Information Commissioner's Office as a precaution regarding potential data compromise.
  • The incident highlights vulnerabilities in local authorities' cyber defenses and the need for improved security measures.
Share your opinion
1

Story

In London, several councils, including the Royal Borough of Kensington and Chelsea and Westminster City Council, experienced a significant cyber attack that raised concerns about data security. The incident was first identified on Monday, prompting these councils to inform the Information Commissioner's Office, which is a standard protocol when data might be compromised. The councils affected share some essential IT infrastructure, leading to a widespread impact on their services. In particular, there are indications that the Hammersmith and Fulham council may also be affected, intensifying the scope of the situation. The Royal Borough of Kensington and Chelsea released a statement indicating that they were working with specialist cyber incident experts and the National Cyber Security Centre to protect their systems while attempting to restore functionality and maintain critical public services. Graeme Stewart, the head of public sector at Check Point, highlighted that the situation has all the characteristics of a serious intrusion, including multiple councils being interrupted and shared systems being compromised. He cautioned that councils store sensitive information, which can be highly valuable for fraudulent activities if accessed by malicious actors. To mitigate potential impacts, the Royal Borough of Kensington and Chelsea has redirected resources to monitor communications like email and phone lines to assist the public. As investigations are ongoing, the council remains vigilant, aiming to determine the extent of data compromise and continue their incident management processes. The incident has raised alarms about the cybersecurity resilience of local authorities in the UK, which often operate under budget constraints and may lack the robust cyber defenses found in larger organizations. The rapid involvement of the National Cyber Security Centre and the Metropolitan Police indicates that the issue is being taken seriously and is treated as a high-risk event rather than a mere IT outage. The continued evaluation of cybersecurity measures, especially in local authorities, highlights the necessity of stronger defenses given the sensitive data they handle and the increasing prevalence of cyber threats.

2026 All rights reserved