In a significant cyber incident, Glasgow City Council has confirmed that its digital services have been severely disrupted following a cyberattack that began on June 19, 2025. The local authority attributed the attack to a supply chain issue involving a third-party contractor’s supplier, leading to the unavailability of essential online services for residents.
According to a statement from the council, early investigations revealed that CGI, the council’s ICT supplier, detected malicious activity on servers managed by a third-party supplier. Supply chain attacks have been on the rise, and this incident is yet another example of the vulnerabilities they exploit.
In response to the incident, the council has been working with Police Scotland, the Scottish Cyber Coordination Centre (SC3), and the National Cyber Security Centre to investigate potential data breaches. While the council has not confirmed whether data exfiltration occurred, it is proceeding with caution, advising residents to be vigilant against potential phishing attacks that may arise from the incident.
A wide array of online services remains down, including application processes for footway crossings and various council services like complaints submissions and planning enforcement. The council has reassured residents that financial systems remain secure, but it is important for users to be cautious when approached by anyone claiming to be affiliated with Glasgow City Council.
The local authority’s spokesperson emphasized that email communication remains safe, buttressing the message that the council will never ask for sensitive information via email. Amidst the anxiety caused by the attack, residents are urged to report any suspected instances of cybercrime to Police Scotland.
As a growing number of local councils in the UK face similar cybersecurity threats, Glasgow’s recent struggles point to the pressing need for improved security measures and public awareness regarding data protection. This incident follows other cyberattacks on councils, such as West Lothian Council and Oxford City Council, highlighting a broader trend affecting public sector organizations.