Could You Be Affected by the Hackney Council Data Breach?

Files of around 280,000 residents and other individuals, including staff, might have been accessed.

 

Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility. 

Quick & Simple

Register your interest

Stay Informed

Get justice

Overview

In October 2020, cyber attackers caused disruption when they broke into Hackney Council’s systems. At the time of the security violation, it was unclear who was behind it, and what their endgame was. Later the attack was confirmed as a ransomware incident.

Months later, reports broke that some personal data had been stolen in the attack and published on the dark web. In total, at least 280,000 residents were affected with 9,605 records exfiltrated in the hack.

The matter was referred to the Information Commissioner’s Office (ICO). It has since reprimanded the London Borough of Hackney, stating that this was “a clear and avoidable error from London Borough of Hackney, one that has resulted in a mass loss of data and has had a severely detrimental impact on many residents. At its absolute worst, this has meant that some of the most deeply personal information possible has ended up in the hands of the attackers.”

We are monitoring the situation closely. Register your interest and we’ll keep you updated if one of our regulated UK partner law firms is able to take this claim forward.

Hackney Council – At a glance  

Status

Stay Informed

Potential claimants

280,000

What do we know about the Hackney Council data breach?

  • The hackers gained access to and encrypted 440,000 files, affecting at least 280,000 residents and other individuals including staff.
  • According to the ICO, the data revealed affected residents’ racial or ethnic origin, religious beliefs, sexual orientation, health data, economic data, criminal offence data, and other basic personal identifiers such as names and addresses.
  • 230 people were deemed to be at “meaningful risk of harm” because of the breach. Others experienced significant levels of distress and worry.
  • In its investigation, the ICO found examples of a lack of proper security and processes to protect personal data.

How Join the Claim works​

Quick survey

Take a moment to answer a few simple questions so we can understand your connection and keep you updated.

Register interest

Share your details so we can keep you informed if any updates become available.

Join a claim

If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.

Latest updates on the Hackney Council data breach

  • July 2024

    The ICO reprimanded the London Borough of Hackney for its poor data security processes. It said the “council failed to effectively implement sufficient measures that could have better protected their systems and data from cyber-attacks”. The council said it did not accept the findings and had not violated its security obligations.

  • January 2021

    Reports emerged that data stolen in the cyberattack was published on the dark web for extortion purposes.

  • October 2020

    Hackney Council announced it was experiencing a serious cyberattack. In the following days, the attack had a significant impact on council services. In some instances, services did not return to normal until 2022.

We’ll provide more updates on this case as they occur. 

Join the claim
Join the claim
Join the claim

Who could be affected by the Hackney Council Data Breach?

If you are a resident or staff, register to stay updated and we’ll let you know if a partner law firm takes this claim forward.

Hackney Council data breach FAQs

In October 2020, Hackney Council suffered a serious cyberattack that disrupted many of its services. The attack was later confirmed as a ransomware incident, meaning hackers stole and encrypted council data, demanding a ransom to release it.

Personal and sensitive data was accessed, some of which was leaked online and appeared on the dark web. According to the ICO, the stolen information included data on residents that revealed their racial or ethnic origin, religious beliefs, sexual orientation, health data, economic data, criminal offence data, and other data including basic personal identifiers such as names and addresses. 

The attack was attributed to a criminal ransomware group. Criminal group Pysa/Mespinoza has been named responsible for publishing the data, although this hasn’t been verified.

Hackney Council worked with the National Cyber Security Centre (NCSC), the Information Commissioner’s Office (ICO), and law enforcement to investigate the breach. The council also rebuilt affected systems and introduced enhanced security measures.

We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.  

No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part. 

A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact.

Rated Excellent


on REVIEWS.io

Rated Excellent on REVIEWS.io

Join the claim
Clifford
Very easy to sign up, hope its sorted soon
Susan
Very easy and quick to complete the claim Everything was explained well and fees payable in etc were made very clear
Peter
So easy to sign up for the claim

Latest Hackney Council data breach news

In October 2020, Hackney Council experienced a devasting cyberattack that compromised the personal data of...
In October 2020, Hackney Council experienced a significant cyber-attack that compromised the personal data of...
Hackney Council suffered a devastating cyberattack in October 2020, exposing sensitive data belonging to residents....