Scottish Council’s Cyber Drama: Still Rebuilding After 2023 Ransomware Fiasco!
Comhairle nan Eilean Siar’s cyber resilience has auditors on edge, as systems lag post-2023 ransomware attack. Despite heroic staff efforts, gaps in cybersecurity remain, with only half the recommendations in place. The council’s response was swift, but stress-testing and staff support need a reboot. Remember: in cyber, it’s not if, but when.

Hot Take:
Looks like Comhairle nan Eilean Siar might need more than just a stiff drink to recover from their ransomware hangover. Two years on, and their systems are still on the fritz. Someone get Scotland’s cyber warriors on the line, stat!
Key Points:
- The ransomware attack in November 2023 severely impacted Comhairle nan Eilean Siar, with systems still being restored two years later.
- Cybersecurity improvements recommended post-attack remain partially unaddressed, with only half of the suggestions implemented by 2025.
- The council’s staffing shortages, particularly in IT roles, exacerbated the recovery process.
- Direct costs of the attack are estimated at £950,000, with the council seeking insurance payouts to cover expenses.
- The attack highlighted the need for better business continuity and incident response testing.
Already a member? Log in here
