Oxford Metropolis Council warns it suffered an information breach the place attackers accessed personally identifiable info from legacy methods.
The incident has additionally prompted an ICT service disruption, as introduced on the web site, and though a lot of the impacted methods have been introduced again on-line, the remaining backlogs could proceed to trigger delays.
Oxford Metropolis Council is the native authorities authority answerable for managing essential public companies, akin to housing, planning, waste assortment, environmental well being, and elections, in Oxford, England.
The authority serves a inhabitants of round 155,000 residents, however its affect extends additional as a result of metropolis’s worldwide prominence by the College of Oxford, tourism, and analysis establishments.
A press release on its web site explains that attackers gained unauthorized entry to a few of its methods and databases, which host private info.
Primarily based on the preliminary investigation, the impacted system contained info on former and present Council officers between 2001 and 2022.
“Sadly, the attackers have been capable of entry some historic knowledge on legacy methods,” reads the assertion revealed on the Oxford Metropolis Council web site.
“We now have now recognized that individuals who labored on Oxford Metropolis Council-administered elections between 2001 and 2022, together with ballot station employees and poll counters, could have had some private particulars accessed.”
The assertion claims there isn’t any proof that the uncovered knowledge has been additional disseminated. Additionally, there isn’t any point out of citizen knowledge having been compromised.
BleepingComputer has contacted Oxford Metropolis Council to specify if citizen knowledge was saved within the accessed databases, and we are going to replace this put up with their response.
The group says the investigation into the incident remains to be ongoing, and no indicators of mass knowledge extraction have been unearthed as of but.
Oxford Metropolis Council says it has begun individually notifying these confirmed to be affected, offering particulars concerning the incident, out there assist assets, and assurances of strengthened safety measures to forestall future breaches.
Additionally, the related authorities authorities and legislation enforcement businesses have been notified accordingly.
Patching used to imply advanced scripts, lengthy hours, and infinite fireplace drills. Not anymore.
On this new information, Tines breaks down how fashionable IT orgs are leveling up with automation. Patch quicker, cut back overhead, and give attention to strategic work — no advanced scripts required.