- Request
-
I am writing to request the following information under the Freedom of Information Act 2000:
1) How many times did your council experience an attempted cyber-attack in each of the following calendar years: 2022, 2023, 2024? If you do not have complete data for 2024, please provide the most up to date information you have available.
2) Of these attacks, how many resulted in the criminal being able to obtain data or disable systems, per calendar year: 2022, 2023, 2024?
3) Please advise what is the most common type of attack you have experienced, again per calendar year: 2022, 2023, 2024? (e.g. malware, ransomware, phishing)
4) For each of the calendar years: 2022, 2023, 2024, what has been the financial cost to recover from these cyber-attacks? If you cannot provide an exact cost, please provide an estimate. Please include costs such as rectification, loss of data, money paid to hackers, legal costs, etc.
5) Do you have an insurance policy to protect against the potential consequences of cyber-attacks?
6) When did you last update your security system to cope with the volume and sophistication of cyber-attacks? - Decision
-
I can confirm that the information requested is held by Lincolnshire County Council. I have detailed below the information that is being released to you.
1.
Attack Type
Year
Malware
Phishing
Spam
Impersonation
Detonation
Zero-hour auto purge
2022
No Data
No Data
No Data
No Data
No Data
No Data
2023
1,443
80,130
215,641
3,172
674
10,837
2024
1,098
64,994
382,756
2,205
684
65,543
2. None
3. Most common type of attack in 2023 and 2024 was via email (Phishing)
4. £0:00 there have been no successful cyber-attacks to recover from
5. No direct Cyber Insurance Policy
6. Security Systems are continuously improved at LCC commensurate to the latest threats and risks facing LCC.
- Reference number
- FOI 11337697
- Date request received
- 03/01/25
- Date of decision
- 31/01/25