Warning to 'stay on guard' after cyber-attack

Leicester City Hall — Image caption,

The council has urged its staff and the public to "be on their guard"

By Jeremy Ball

Social Affairs Correspondent, BBC East Midlands Today

People have been told to "stay on their guard" after a cyber-attack on Leicester City Council.

Police were alerted after the authority was forced to disable its phone and computer systems on 7 March.

While about 25 documents have been posted by the apparent attackers, they claim to have a much larger number.

Officials said they did not know if this was true, but they would contact anyone whose details were confirmed to have been taken.

computer — Image caption,

The council said a "very sophisticated gang" had claimed responsibility for the attack

According to BBC Cyber Correspondent Joe Tidy, it is understood that a ransomware group called INC Ransom has claimed responsibility for the attack.

The group has claimed to have taken 3TB of data, roughly equivalent to 1 million smartphone photographs.

Richard Sword, strategic director of city developments and neighbourhoods at the council, said he recognised the situation would be causing widespread concern.

"We don't know what amount of data they have taken," he said. "They claim to have taken 3 terabytes.

"We also don't know what sort of information they might have taken; the potential is it could affect a lot of people.

"All we do at this time is monitor and respond to the situation."

Phishing scams

The documents published include people's rent statements, applications to purchase council housing and identification documents such as passport information, the council said.

Mr Sword confirmed the original attack prompted the "highest level of alarm", and work with other agencies was ongoing.

He described it as the work of a "very sophisticated gang" but said no demands for money had been received.

"We recommend that anyone who has engaged with us stays on their guard.

"People should be careful with their data anyway, but be mindful if you've had contact with the council.

"There could be phishing scams, and always look out that it's genuinely from Leicester City Council email address, and if you are at all concerned, ring one of the call centres," he said.

There is also guidance on precautions on the council's website.

It comes after INC Ransom targeted NHS Dumfries and Galloway with similar demands towards the end of March.