I am writing to request the following information under the Freedom of Information Act 2000:
1. How many times did your council experience an attempted cyber-attack in each of the following calendar years: 2022, 2023, 2024? If you do not have complete data for 2024, please provide the most up to date information you have available.
2. Of these attacks, how many resulted in the criminal being able to obtain data or disable systems, per calendar year: 2022, 2023, 2024?
3. Please advise what is the most common type of attack you have experienced, again per calendar year: 2022, 2023, 2024? (e.g. malware, ransomware, phishing)
4. For each of the calendar years: 2022, 2023, 2024, what has been the financial cost to recover from these cyber-attacks? If you cannot provide an exact cost, please provide an estimate. Please include costs such as rectification, loss of data, money paid to hackers, legal costs, etc.
5. Do you have an insurance policy to protect against the potential consequences of cyber-attacks?
6. When did you last update your security system to cope with the volume and sophistication of cyber-attacks?