Glasgow City Council hit by cyber-attack  

Glasgow City Council has confirmed customer data may have been stolen, as it deals with a cyber incident that has disrupted several online services. 

The council first knew of the breach last week, after its IT supplier CGI flagged malicious activity on servers managed by a third-party supplier on 19 June.  

A number of digital and online services have been forced offline, including planning applications, paying for parking fines, reporting school absences and ordering certificates from city registrars.   

The council confirmed it has contacted Police Scotland, the Scottish Cyber Coordination Centre (SC3), and the National Cyber Security Centre, and an investigation is now underway. 

Online calendars, such as household schedules for bin collection and the Strathclyde Pension Fund online portal, have also been affected.     

The council confirmed no financial system has been impacted and no details of bank accounts or credit/debit cards processed by those systems have been compromised. 

However, it said it was “operating on the assumption” that customer data may have been taken, and has contacted the Information Commissioner’s Office on this basis. 

It has urged anyone who used any of the affected forms to be “particularly cautious” of being contacted by entities posing as Glasgow City Council and asked those who are contacted by someone claiming to have their data to contact Police Scotland on 101 or call the Cyber Incident Response Helpline on 0800 1670 623.