Glasgow City Council has said that so far, investigations into the cyber-attack the organisation discovered on the 19th July has not found any evidence of stolen data.

The cyber-attack was discovered by the Council’s ICT supplier CGI, which found malicious activity on servers that were managed by a third-party supplier.

The servers were quicky isolated from the Council’s wider network and taken offline, which disrupted some of the Council’s day-to-day online services.

While so far no evidence of data being stolen was found, the Council admitted that “until forensic examination of the affected servers is complete, we will continue to work on the presumption that data may have been lost – and that this may include customer data.”

However, no council financial systems were affected in the attack, and no payment or bank account details processed by these systems were compromised.

The Council is continuing its investigation into the cyber incident, working with Police Scotland, the Scottish Cyber Coordination Centre, and the National Cyber Security Centre.

Recommended reading

• Glasgow City Council Warns of Possible Data Theft Following ‘Cyber Incident’
• Report: Cyber Breaches Are Tanking Share Prices
• AI Ushering in A “Digital Divide” in Cybersecurity, NCSC Warns

In their work to recover affected services, the Council have so far restored public Freedom of Information requests as well as pension services.

“We are sorry that this incident will have caused real anxiety to people who have used our online services – and frustration for those unable to access those services now,” the Council said in a statement.

The Council did warn constituents that “If you are contacted by someone claiming to have your data, you should contact Police Scotland on 101.”