Disclosure Log

Cyber Attacks (FOI/5212)

Message from Nottinghamshire County Council - 20 January 2025

Dear *****

Freedom of Information Request – Ref: FOI/00005212

Thank you for your email of 3 January 2025 where you requested information about cyber attacks.

The information you requested is:
 
  1. How many times did your council experience an attempted cyber-attack in each of the following calendar years: 2022, 2023, 2024 If you do not have complete data for 2024, please provide the most up to date information you have available.
     
202220232024
232017774421
 
  1. Of these attacks, how many resulted in the criminal being able to obtain data or disable systems, per calendar year: 2022, 2023, 2024 – Nil for all years (2022, 2023 and 2024).
  2. Please advise what is the most common type of attack you have experienced, again per calendar year: 2022, 2023, 2024 (e.g. malware, ransomware, phishing) - 2022 – Phishing, 2023 – failed logon attempts, 2024 - Phishing.
  3. For each of the calendar years: 2022, 2023, 2024, what has been the financial cost to recover from these cyber-attacks If you cannot provide an exact cost, please provide an estimate. Please include costs such as rectification, loss of data, money paid to hackers, legal costs, etc. - £NIL for all years (2022, 2023 and 2024).
  4. Do you have an insurance policy to protect against the potential consequences of cyber-attacks - No
  5. When did you last update your security system to cope with the volume and sophistication of cyber-attacks - January 2025. 

Your privacy: we use your personal information such as name and address so that we can comply with our legal obligations to respond to FOI requests.  For further details about the use of information about you, please see the information handling privacy notice on our website at https://www.nottinghamshire.gov.uk/media/4323566/informationgovernanceandinformationrightsprivacynotice.pdf.

If you are dissatisfied with the handling of your request, you have the right to ask for an internal review.  Internal review requests should be submitted within 40 working days of the date of receipt of the response to your original request and should be addressed to: Complaints and Information – Team Manager, Nottinghamshire County Council, County Hall, Loughborough Road, West Bridgford, NOTTINGHAM, NG2 7QP or [email protected].

Please remember to quote the reference number above in any future communications. 

If you are not content with the outcome of the internal review, you have the right to apply directly to the Information Commissioner for a decision.  The Information Commissioner can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, WILMSLOW, SK9 5AF or https://ico.org.uk/make-a-complaint/foi-and-eir-complaints/.

Yours sincerely

Colin Sawers (He/Him)
Information Case Officer | Customers, Complaints and Information
Chief Executive"s Department | Nottinghamshire County Council
County Hall | Loughborough Road | West Bridgford | NOTTINGHAM | NG2 7QP
Tel: (0115) 977 3714