Council boosts security over cyber attack fears

The council has subscribed to a new cyber security service for 12 months

A council has upgraded its security systems over fears of Russian cyber attacks on local authorities.

Middlesbrough Council has subscribed to a 12-month security service, which cost about £25,000.

Labour councillor David Branson raised his concerns about a possible attack on the council - which was targeted in 2024 - and highlighted the need to be prepared.

Ann-Marie Johnstone, head of governance, policy and information, said lessons had been learnt after an incident involving Redcar and Cleveland Council, which cost that authority an estimated £10.4m.

She said: "Our auditors and other auditors publish regular guidance on the nature of cyber security threats, as does the National Cyber Security Centre issues guidance and we absolutely do learn from those."

Gary Welch, strategic risk and health and safety manager at the council, commented how internal audits were undertaken on the council's ICT disaster recovery, according to the Local Democracy Reporting Service.

He said that following a recent check, the council had been out and purchased some new systems, "which will help protect us".

'Dramatic improvements'

In February 2020, Redcar and Cleveland Council's computer systems were targeted in an attack, leaving about 135,000 people without access to online public services.

Middlesbrough was one of a number across the UK to be targeted in 2024, which pro-Russian hackers claimed responsibility for.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Mr Welch said a new ICT head of service had been appointed and when Mr Branson asked if officers were happy, they said "as happy as we can be", with "dramatic" improvements over the last six months highlighted.

Mr Branson said there had been a doubling of ICT and other security incidents from 19 in 2022 to 38 in 2024.

Ms Johnstone said the increase had come from a greater focus on recording loss of assets, mainly fobs.

She said the Labour-led council had "locked down" on recording those losses and making sure lost fobs were deactivated.