Glasgow City Council online services crippled following cyberattack

A cyberattack on Glasgow City Council is causing massive disruption with a slew of its digital services unavailable. The local authority has confirmed the attack started on June 19 and attributed it to a supply chain issue involving a third-party contractor's supplier. A council statement said: "Early in the morning of Thursday 19th June 2025, the council's ICT supplier CGI discovered malicious activity on servers managed by a third-party supplier. "We are conducting an investigation into the incident, alongside Police Scotland, the Scottish Cyber Coordination Centre (SC3) and the National Cyber Security Centre. "In the meantime, taking affected servers offline has disrupted a number of our day-to-day digital and online services. "Glasgow City Council apologises for the anxiety and inconvenience this incident and the necessary response to it will undoubtedly cause." The council said it can't yet confirm whether data has been exfiltrated from its environment, but is operating on a precautionary basis as though it has. Online forms and calendars dominate the list of services that remain unavailable to locals. According to the council's website, the following are down at the time of writing: Glasgow City Council said it contacted the UK's data protection watchdog on the basis that the suspected stolen data was taken from these web forms, and it warned customer data may be included. No financial systems were compromised, it added, and any banking data can be considered safe. The ...