A significant cyber attack has disrupted operations across three London councils, leading to the activation of emergency response plans and an ongoing investigation by the National Crime Agency (NCA) and GCHQ's Cyber Security Centre. The Royal Borough of Kensington and Chelsea (RBKC), Westminster City Council, and Hammersmith and Fulham Council have all been affected by the incident, which has compromised several IT systems shared between the councils.

Impact on Services

The councils have taken precautionary measures by shutting down various computer systems to prevent further damage. This has resulted in disruptions to services such as phone lines and online forms, with RBKC advising staff to work remotely. Despite these challenges, the councils have emphasized their commitment to maintaining critical services, particularly for vulnerable residents. Alternative contact numbers have been provided on their websites to ensure continued communication with the public.

Investigation and Response

The NCA and GCHQ are leading the investigation to determine the cause and extent of the cyber attack. RBKC has confirmed that the cause of the incident has been identified, but further details remain undisclosed due to the ongoing investigation. Cyber security experts are collaborating with the councils to protect and restore affected systems. The Information Commissioner's Office has been notified, reflecting the potential risk of a data breach.

Expert Insights and Public Caution

Cyber security consultant Nathan Webb has warned of the possibility of personal data being compromised and advised residents to exercise caution with any correspondence related to the incident. He noted that attackers might exploit the publicity surrounding the attack to target victims further. Rik Ferguson from Forescout highlighted the interconnected nature of digital infrastructures, which can amplify the impact of such attacks across multiple organizations.