Hackers likely copied and took limited sensitive personal data from a shared IT system used by Westminster City Council and Kensington and Chelsea Council during a November cyberattack, prompting a multiagency investigation and service disruptions, officials said. This incident is being referred to as the Westminster data breach.
Westminster City Council said the breach affected data hosted on a shared system with Kensington and Chelsea Council, though the full scope and the specific information accessed remain under investigation. The disclosure comes as councils across the United Kingdom face rising cyber threats targeting public services.
Councils Investigate Scope of Data Breach
The Local Democracy Reporting Service reported that Westminster officials believe some data was “copied and taken” during the attack. The council said it is working with the Metropolitan Police, the National Crime Agency and the National Cyber Security Centre, along with external cyber security specialists, to determine how the attack occurred and how residents may be affected.
Officials did not specify what categories of data were involved, describing the exposure as limited while acknowledging the potential sensitivity of the information. The council said it would provide updates as investigators confirm details and assess risks.
David Boothroyd, Westminster’s cabinet member for finance and council reform, said the authority moved quickly to contain the incident. “I want to reassure residents that we are doing everything possible to respond effectively to the Westminster data breach and to keep delivering our services,” Boothroyd said.
He added that protecting vulnerable residents remains the top priority despite ongoing disruption. “We acted quickly to secure our systems, and we are working towards restoring council services as safely and swiftly as possible, but this will take time,” Boothroyd said.
Services Disrupted as Recovery Continues
Westminster said the cyberattack has disrupted a number of council services, though it did not release a comprehensive list. Restoration efforts are ongoing, and officials cautioned that full recovery may take time due to the need to ensure systems are secure before they return to normal use.
Kensington and Chelsea Council, which shared the affected IT system, said the impact on services could last for months. Council leader Elizabeth Campbell said the authority would conduct a formal review once immediate recovery efforts are complete.
“We will carry out a review when the time is right,” Campbell said, signaling a broader examination of cyber resilience and response once services stabilize.
A third authority linked to the shared system, Hammersmith and Fulham Council, said there is no evidence so far that its systems were compromised. The council said it continues to monitor the situation and work with partners to ensure its systems remain secure.
Residents Urged to Stay Alert
Westminster City Council is urging residents to be cautious about unexpected calls, emails or text messages that could exploit concerns about the Westminster data breach. Officials advised residents to follow guidance from the National Cyber Security Centre and to avoid sharing personal information unless they are certain the contact is legitimate.
To support residents, the council has set up a dedicated helpline and email address to handle inquiries related to the cyberattack. The helpline, 0207 641 1919, is open from nine a.m. to five p.m. on Monday, Tuesday, Thursday and Friday, and from nine a.m. to four p.m. on Wednesday.
Residents can also email cyberenquiry@westminster.gov.uk
for assistance. The council said staff are available to answer questions about the incident, provide updates and direct residents to appropriate support concerning the Westminster data breach.
Westminster officials emphasized their commitment to transparency as the investigation continues. “We remain committed to transparency and will continue to provide updates as our recovery progresses,” Boothroyd said.
Authorities said they will release further information as soon as it is verified, urging patience as teams balance public communication with the need to protect systems and evidence during the investigation of the Westminster data breach.
Visit CyberPro Magazine For The Most Recent Information.
