Oxford City Council Data Breach Exposes 20 Years of Records
▼ Summary
– Oxford City Council experienced a data breach where attackers accessed personal information from legacy systems, causing ICT service disruptions.
– The breach primarily affected current and former Council officers and election workers from 2001 to 2022, but no citizen data was confirmed compromised.
– The council is investigating the incident and has found no evidence of mass data extraction or further dissemination of the exposed data.
– Affected individuals are being notified and provided with support resources, along with assurances of improved security measures.
– The council has informed relevant government authorities and law enforcement about the breach.
Oxford City Council has confirmed a significant data breach exposing sensitive personal information spanning two decades, with attackers infiltrating legacy systems containing records from 2001 to 2022. The breach disrupted critical ICT services, though most systems have since been restored. Officials warn that processing delays may persist as backlogs are cleared.
The council, which oversees essential public services for Oxford’s 155,000 residents, revealed that unauthorized access targeted databases storing details of current and former employees. Election workers, including poll station staff and ballot counters, are among those potentially affected, with personal data compromised between 2001 and 2022. While the council maintains no evidence of widespread data misuse, investigations remain ongoing.
In an official statement, the authority emphasized that no citizen data appears to have been accessed, focusing instead on personnel records. Affected individuals are being contacted directly with guidance on protective measures and assurances of enhanced cybersecurity protocols. The council has also alerted law enforcement and relevant government agencies.
The breach highlights vulnerabilities in legacy systems, raising concerns about long-term data retention practices. Oxford City Council’s international profile, bolstered by the University of Oxford and thriving tourism, adds urgency to resolving the incident swiftly. As the probe continues, officials urge vigilance but stop short of confirming whether attackers extracted data in bulk. Updates will follow as new details emerge.
(Source: BLEEPING COMPUTER)
