When Ransomware Strikes: The British Library’s Comedic Data Drama and ICO’s Resource Limbo
The UK’s data protection overlord waved a white flag on investigating the British Library’s ransomware debacle, citing resource constraints. The library’s lack of MFA on an admin account led to the chaos, but their candid crisis comms won applause. Meanwhile, the Information Commissioner’s Office is busy juggling over 10,000 complaints.

Hot Take:
Who knew that a library could be a page-turner in the world of cybersecurity? The British Library’s ransomware saga is like a gripping novel full of suspense, revelations, and a plot twist where the ICO decides to put down its magnifying glass and let the library write its own sequel. Maybe next time they’ll remember to lock the backdoor—or at least use a stronger password than “1234admin”.
Key Points:
- The Information Commissioner’s Office (ICO) is not pursuing further investigation into the British Library’s ransomware attack.
- Multifactor Authentication (MFA) was notably absent, leading to the digital disaster.
- The British Library was praised for its transparent communication and post-attack analysis.
- The ICO is currently facing resource constraints, impacting its ability to investigate thoroughly.
- Despite the attack, the British Library has been commended for its crisis management and future security commitments.
Already a member? Log in here