Westminster and Kensington councils confirm data was stolen in a November cyber attack. Residents are urged to stay alert as recovery efforts continue
A sprawling cyber attack has breached the digital defenses of two of London’s wealthiest boroughs, with officials admitting that hackers likely “copied and taken” sensitive personal data during a November security breach.
The breach, first reported by the Local Democracy Reporting Service, centers on a shared IT infrastructure used by Westminster City Council and the Royal Borough of Kensington and Chelsea. While Westminster officials characterized the stolen information as “limited data,” the full scope of the exposure remains under investigation by a heavy-hitting coalition including the Metropolitan Police, the National Crime Agency, and the National Cyber Security Centre.
Also Read: The Unified Security Approach MSPs Need Now
David Boothroyd, Westminster’s cabinet member for Finance and Council Reform, sought to strike a balance between caution and calm.
“I want to reassure residents that we are doing everything possible to respond effectively,” Mr. Boothroyd said, noting that while systems were secured quickly, restoring full functionality will be a slow process. “Our priority is to support and protect the most vulnerable in our community, despite the disruption.”
The timeline for a return to normalcy remains hazy. Across the borough line, Kensington and Chelsea Council warned that it may take months for services to fully recover. Elizabeth Campbell, the council leader, indicated a formal review of the lapse would be conducted “when the time is right.”
A Tale of Three Boroughs
While the shared system between Westminster and Kensington was compromised, Hammersmith and Fulham Council—the third partner in the regional administrative alliance—reported that there is currently no evidence that its own systems were breached.
Also Read: The Code Problem: Why Connected Cars Are Prime Cyber Targets
Guidance for Residents
With personal data potentially in the hands of bad actors, Westminster is urging a state of high alert. Residents should treat unexpected calls, texts, or emails with extreme skepticism, following the “trust but verify” protocols established by national cyber experts.
To assist those concerned about their data, a dedicated support infrastructure has been established:
- Helpline: 0207 641 1919
- Hours: Mon, Tue, Thu, Fri (9 a.m. – 5 p.m.); Wed (9 a.m. – 4 p.m.)
- Email: cyberenquiry@westminster.gov.uk
The council has also published a comprehensive list of disrupted services on its website, which is updated regularly as the recovery enters its next phase.
