Cyber-attacks - Find a freedom of information request

Request

I am writing to request the following information under the Freedom of Information Act 2000:

1) How many times did your council experience an attempted cyber-attack in each of the following calendar years: 2022, 2023, 2024? If you do not have complete data for 2024, please provide the most up to date information you have available. 

2) Of these attacks, how many resulted in the criminal being able to obtain data or disable systems, per calendar year: 2022, 2023, 2024?

3) Please advise what is the most common type of attack you have experienced, again per calendar year: 2022, 2023, 2024? (e.g. malware, ransomware, phishing)

4) For each of the calendar years: 2022, 2023, 2024, what has been the financial cost to recover from these cyber-attacks? If you cannot provide an exact cost, please provide an estimate. Please include costs such as rectification, loss of data, money paid to hackers, legal costs, etc. 

5) Do you have an insurance policy to protect against the potential consequences of cyber-attacks?

6) When did you last update your security system to cope with the volume and sophistication of cyber-attacks?

Decision

I can confirm that the information requested is held by Lincolnshire County Council. I have detailed below the information that is being released to you.

1.

 Attack Type

Year

Malware

Phishing

Spam

Impersonation

Detonation

Zero-hour auto purge

2022

No Data

No Data

No Data

No Data

No Data

No Data

2023

1,443

80,130

215,641

3,172

674

10,837

2024

1,098

64,994

382,756

2,205

684

65,543

2. None

3. Most common type of attack in 2023 and 2024 was via email (Phishing)

4. £0:00 there have been no successful cyber-attacks to recover from

5. No direct Cyber Insurance Policy

6. Security Systems are continuously improved at LCC commensurate to the latest threats and risks facing LCC.

 

 

Reference number
FOI 11337697
Date request received
03/01/25
Date of decision
31/01/25