Cloud data breaches and cyberattacks – 2019-2020

  • How many cloud data breaches have occurred within your organisation in 2019 and 2020?

We believe that information relating to any cloud data breaches which the Council may or may not have experienced is exempt from disclosure under Section 31(3) of the Freedom of Information Act 2000 – ‘Law Enforcement’. This is because disclosure places the organisation at increased risk of targeted cyber-crime. The Council’s networks and systems hold information about individuals and, therefore, the possible chain of events resulting from releasing this information could put individuals, and authorities, at risk of criminal activity.

  • How many cyberattacks have occurred within your organisation in 2019 and 2020?

We believe that information relating to any successful cyber-attacks which the Council may or may not have experienced is exempt from disclosure under Section 31(3) of the Freedom of Information Act 2000 – ‘Law Enforcement’. This is because disclosure places the organisation at increased risk of targeted cyber-crime. The Council’s networks and systems hold information about individuals and, therefore, the possible chain of events resulting from releasing this information could put individuals, and authorities, at risk of criminal activity.

  • How many ransomware attacks have occurred within your organisation in 2019 and 2020?

We believe that information relating to any successful ransomware attacks which the Council may or may not have experienced is exempt from disclosure under Section 31(3) of the Freedom of Information Act 2000 – ‘Law Enforcement’. This is because disclosure places the organisation at increased risk of targeted cyber-crime. The Council’s networks and systems hold information about individuals and, therefore, the possible chain of events resulting from releasing this information could put individuals, and authorities, at risk of criminal activity.

  • How many data loss incidents have occurred as a result of lost or stolen devices storing your organisation’s data (such as USB flash drives, Hard Drives, Solid State Drives, mobile phones or laptops) within your organisation in 2019 and 2020?

Number of data loss incidents resulting from lost/stolen devices:

2019 – 0

2020 – 0