Multiple London councils report disruption amid ongoing cyberattack

Multiple London councils are facing service disruptions due to an ongoing cyberattack. Learn which councils are affected, how residents are impacted, and what steps are being taken to secure systems and restore services.

Nov 27, 2025 - 23:50
Nov 30, 2025 - 14:50
Multiple London councils report disruption amid ongoing cyberattack

Several London councils have recently experienced a major cyberattack that disrupted their IT systems and public services. The affected councils include Kensington and Chelsea, Westminster, and Hammersmith and Fulham. These councils share parts of their IT infrastructure, which likely contributed to the rapid spread and simultaneous disruption.

The attack impacted a wide range of services. Residents reported difficulties accessing online systems, making phone calls to council offices, and receiving essential services such as housing support, council tax processing, and waste collection. Officials confirmed that some archived resident files, totaling nearly 440,000 records from 2006 to 2020, may have been accessed or copied. This has raised concerns about potential data breaches and the risk of phishing attempts targeting affected residents.

In response, the councils immediately activated emergency protocols. They took affected systems offline to prevent further damage and engaged specialist cybersecurity teams to investigate the breach. Authorities are also working with the National Cyber Security Centre, the National Crime Agency, and the Information Commissioner’s Office to assess the situation and restore secure operations. Some councils are providing in-person support for urgent matters while digital services are being restored.

The identity of the attackers and their motives remain unknown. Officials have not disclosed whether personal or financial data beyond the archived files has been exposed. The investigation is ongoing, and services may remain disrupted for several days as recovery efforts continue.

This incident highlights the vulnerability of shared IT infrastructures and underscores the importance of robust cybersecurity for public institutions. Residents are advised to monitor their accounts, remain vigilant for suspicious emails or communications, and follow any guidance provided by their local council.

The attack also serves as a reminder for public institutions worldwide to strengthen their cybersecurity measures, perform regular audits, and maintain clear emergency response plans. As local governments increasingly rely on digital systems, protecting sensitive information and maintaining service continuity remain critical priorities.

What's Your Reaction?

like

dislike

love

funny

angry

sad

wow