Shared IT Service Cyberattack Impacts London Boroughs

A cyberattack targeting the ‘OneSource’ shared services platform has caused a major IT incident for multiple London councils. The London boroughs of Waltham Forest, Havering, and Barking and Dagenham have all confirmed they were affected by the disruption. OneSource, a joint venture established by the councils of Havering and Newham, provides essential back-office services, including HR, finance, and IT, to several local authorities.

The incident was first acknowledged by Waltham Forest Council, which described it as a “major IT incident affecting our finance and HR systems.” Both Havering Council and Barking and Dagenham Council also confirmed their IT systems were impacted and that they are working with OneSource and other partners to resolve the situation.

Disruption Details and Official Response

Following the attack, Waltham Forest Council issued a statement to provide details on the operational impact. A spokesperson confirmed that while core services for residents remained unaffected, certain administrative functions were disrupted. The council activated its backup systems to ensure payments could still be made and received. “Staff payments were processed as normal, however, some expense claims and invoices for our suppliers have been delayed. We are working to process these as quickly as possible,” the spokesperson stated.

Importantly, the council also addressed data security concerns, noting, “At this time, there is no evidence that data has been extracted from our systems.” The UK’s National Cyber Security Centre (NCSC) is aware of the incident and is providing support to the affected councils as they work to restore full functionality to their systems.

Source: https://securityaffairs.com/185086/security/multiple-london-councils-faced-a-cyberattack.html