Response 3615155

Response to request for information

Reference

3615155

Response date

20 January 2025

Request

1. How many times did your council experience an attempted cyber-attack in each of the following calendar years: 2022, 2023, 2024? If you do not have complete data for 2024, please provide the most up to date information you have available.
2. Of these attacks, how many resulted in the criminal being able to obtain data or disable systems, per calendar year: 2022, 2023, 2024?
3. Please advise what is the most common type of attack you have experienced, again per calendar year: 2022, 2023, 2024? (e.g. malware, ransomware, phishing)
4. For each of the calendar years: 2022, 2023, 2024, what has been the financial cost to recover from these cyber-attacks? If you cannot provide an exact cost, please provide an estimate. Please include costs such as rectification, loss of data, money paid to hackers, legal costs, etc.
5. Do you have an insurance policy to protect against the potential consequences of cyber-attacks?
6. When did you last update your security system to cope with the volume and sophistication of cyber-attacks?

Response

1. How many times did your council experience an attempted cyber-attack in each of the following calendar years: 2022, 2023, 2024? If you do not have complete data for 2024, please provide the most up to date information you have available.

   We do not hold specific records on the total number of attempted cyber-attacks. However, our IT security systems are continuously monitored to detect and prevent malicious activity.

2. Of these attacks, how many resulted in the criminal being able to obtain data or disable systems, per calendar year: 2022, 2023, 2024?

   There have been no recorded incidents where an attacker successfully obtained data or disabled our systems during the requested period.

3. Please advise what is the most common type of attack you have experienced, again per calendar year: 2022, 2023, 2024? (e.g. malware, ransomware, phishing)

   Not applicable

4. For each of the calendar years: 2022, 2023, 2024, what has been the financial cost to recover from these cyber-attacks? If you cannot provide an exact cost, please provide an estimate. Please include costs such as rectification, loss of data, money paid to hackers, legal costs, etc.

   Not applicable

5. Do you have an insurance policy to protect against the potential consequences of cyber-attacks?

   No, we do not have a specific cyber insurance policy in place.

6. When did you last update your security system to cope with the volume and sophistication of cyber-attacks?

   Our security systems undergo regular updates, with the most recent significant upgrade implemented in January 2025.