Cyber security incident under investigation

Investigations are underway at Gateshead Council following the discovery of a cyber security incident.
Criminals have targeted the council and the North East Regional Organised Crime Unit (NEROCU), a collaboration between Cleveland Police, Durham Constabulary, and Northumbria Police, is investigating this matter.
However, leaders are reassuring the public that the council continues to operate its business as usual after the initial threat was quickly contained, preventing further damage.
The incident happened in the early hours of Wednesday 8 January, and officers have been working since then to investigate and understand the impact. These investigations have shown some personal data has been infringed. Those impacted are being contacted directly by council officers.
The cyber incident was contained due to the robust security checks already put in place by the council.
The Information Commissioner's Office (ICO) and other regulatory bodies have been informed and are liaising with the council. The incident was reported to the ICO in line with statutory requirements of the Data Protection Act 2018 / GDPR.
Mike Barker, Strategic Director for Corporate Services and Governance for Gateshead Council, said: "We have taken immediate remedial action to limit data loss and business continues as usual now we have isolated this incident, but investigations continue into this.
"Work is on-going with relevant parties to understand how this incident happened and any wider implications it may have.
"A number of files have been accessed as part of this incident and we are now contacting those people impacted directly to ensure they are protected from any further harm. The police are also investigating this as a crime.
"Incidents of this nature unfortunately are on the rise, with many organisations like ours already having dealt with such situations.
"Our robust security measures have meant the potential damage this could have caused has been mitigated and we are still able to operate our day-to-day business activities.
"Protecting the public is our top priority and I want to reassure our residents and stakeholders we take such situations extremely seriously.
"As a precaution we would like to offer the following advice to residents and customers of Gateshead Council:
- Look out for any phishing emails or fraudulent activity on your accounts
- Use strong, unique passwords
- If you suspect your account has been compromised, change your password
- Be vigilant for anything that does not seem right and be cautious when sharing your personal information "
There is further guidance available for individuals on the National Cyber Security Centre website (opens new window).
Mr Barker added: "We will be providing updates as part of the ongoing response to this incident and if we discover your data is at risk we will contact you directly.
"As investigations continue there is a possibility of further issues arising, and we will work to mitigate this should that be the case. Investigations so far have not indicated there is any further damage caused, but we need to be open to the possibility."

Investigations are underway at Gateshead Council following the discovery of a cyber security incident.
Criminals have targeted the council and the North East Regional Organised Crime Unit (NEROCU), a collaboration between Cleveland Police, Durham Constabulary, and Northumbria Police, is investigating this matter.
However, leaders are reassuring the public that the council continues to operate its business as usual after the initial threat was quickly contained, preventing further damage.
The incident happened in the early hours of Wednesday 8 January, and officers have been working since then to investigate and understand the impact. These investigations have shown some personal data has been infringed. Those impacted are being contacted directly by council officers.
The cyber incident was contained due to the robust security checks already put in place by the council.
The Information Commissioner's Office (ICO) and other regulatory bodies have been informed and are liaising with the council. The incident was reported to the ICO in line with statutory requirements of the Data Protection Act 2018 / GDPR.
Mike Barker, Strategic Director for Corporate Services and Governance for Gateshead Council, said: "We have taken immediate remedial action to limit data loss and business continues as usual now we have isolated this incident, but investigations continue into this.
"Work is on-going with relevant parties to understand how this incident happened and any wider implications it may have.
"A number of files have been accessed as part of this incident and we are now contacting those people impacted directly to ensure they are protected from any further harm. The police are also investigating this as a crime.
"Incidents of this nature unfortunately are on the rise, with many organisations like ours already having dealt with such situations.
"Our robust security measures have meant the potential damage this could have caused has been mitigated and we are still able to operate our day-to-day business activities.
"Protecting the public is our top priority and I want to reassure our residents and stakeholders we take such situations extremely seriously.
"As a precaution we would like to offer the following advice to residents and customers of Gateshead Council:
- Look out for any phishing emails or fraudulent activity on your accounts
- Use strong, unique passwords
- If you suspect your account has been compromised, change your password
- Be vigilant for anything that does not seem right and be cautious when sharing your personal information "
There is further guidance available for individuals on the National Cyber Security Centre website (opens new window).
Mr Barker added: "We will be providing updates as part of the ongoing response to this incident and if we discover your data is at risk we will contact you directly.
"As investigations continue there is a possibility of further issues arising, and we will work to mitigate this should that be the case. Investigations so far have not indicated there is any further damage caused, but we need to be open to the possibility."