What happened to the Royal Borough of Kensington and Chelsea council website?

Hackers accessed and stole data from the council's website, potentially exposing sensitive personal information of over 100,000 residents.

How many people are affected by the Kensington and Chelsea cyberattack?

More than 100,000 households have been contacted and warned about the potential impact of the data breach.

Home / Crime and Justice / UK Elite Hacked: Council Data Breach Exposed

UK Elite Hacked: Council Data Breach Exposed

Q: Which UK councils were affected by the cyber attack?

The Royal Borough of Kensington and Chelsea, Westminster City Council, and Hammersmith and Fulham Council were all affected by the cyber incident.

6 Jan

•

Summary

Over 100,000 households alerted after council data breach.
Sensitive personal information may have been compromised.
Hackers accessed files belonging to Kensington and Chelsea Council.

UK Elite Hacked: Council Data Breach Exposed

Hackers have targeted the Royal Borough of Kensington and Chelsea, leading to a data breach affecting over 100,000 residents. Cyber criminals accessed the council's website, copying and stealing sensitive personal information. The Met Police and National Cyber Security Centre are actively investigating the incident, which was discovered on November 24. Council officials anticipate that restoring normal services will require several months.

The breach is confirmed to have impacted data from Westminster City Council and Hammersmith and Fulham Council as well. While Westminster reported limited data affected, Hammersmith and Fulham noted ongoing security measures and unavailability of some online services. This incident underscores a rising trend of cyberattacks against UK local authorities, with Kensington and Chelsea Council itself having reported over 113,000 phishing attempts in a recent period.

Kensington and Chelsea Council stated that while they are prioritizing checks for vulnerable individuals, a thorough review will take months. They are working with law enforcement to prepare for potential misuse or publication of the stolen data. The Information Commissioners' Office has been notified, and the council leadership expressed gratitude for external expertise in managing the recovery and rebuilding process.