View source for 2017 Westminster cyberattack

The '''2017 Westminster cyberattack''' occurred on 23 June 2017, when an unauthorised attempt was made to gain access to email accounts belonging to a number of politicians at the United Kingdom's Houses of Parliament.<ref>{{cite news |url=https://www.theguardian.com/politics/2017/jun/24/cyber-attack-parliament-email-access |title=Cyber-attack on parliament leaves MPs unable to access emails |publisher=Guardian Media Group |newspaper=The Guardian |date=24 June 2017 |access-date=24 June 2017 |url-status=live |archive-url=https://web.archive.org/web/20170624152047/https://www.theguardian.com/politics/2017/jun/24/cyber-attack-parliament-email-access |archive-date=24 June 2017 }}</ref> [[Social:Civil Service (United Kingdom)|Whitehall]] officials have claimed that [[Religion:Iran|Iran]] was behind the attack. <ref>{{cite news |url=https://www.bbc.com/news/uk-41622903|title=Iran blamed for Parliament cyber-attack
|work=BBC News |publisher=BBC |date=14 October 2017 |access-date=20 December 2020}}</ref>

The incident was followed by an attempt to hack accounts belonging to politicians at the Scottish Parliament in August 2017.

==Events==
Parliamentarians were told about the [[Cyberattack|cyberattack]] on the evening of 23 June, and it was made public knowledge the following day by Chris Rennard, a Liberal Democrat member of the House of Lords who posted a request on [[Social:Social media|social media]] asking people needing to contact him urgently to do so via text message. Remote access to politicians email accounts was disabled.

However, a spokesperson for the House of Commons said that this was a precautionary measure to protect security rather than a consequence of the cyberattack itself. The matter is being investigated by the [[Organization:National Cyber Security Centre (United Kingdom)|National Cyber Security Centre]] with assistance from the National Crime Agency.<ref>{{cite news |url=https://www.bbc.co.uk/news/uk-40394074 |title=Parliament hit by cyber-attack |work=BBC News |publisher=BBC |date=24 June 2017 |access-date=24 June 2017 |url-status=live |archive-url=https://web.archive.org/web/20170624151206/http://www.bbc.co.uk/news/uk-40394074 |archive-date=24 June 2017 }}</ref>

Westminster authorities described the attack as "sustained and determined", and follows media reports that the email passwords of government ministers had been obtained by hackers and were being sold online.<ref>{{cite news |first=Ben |last=Riley-Smith |url=https://www.telegraph.co.uk/news/2017/06/24/parliament-hit-sustained-determined-cyber-attack/ |title=Parliament hit by 'sustained and determined' cyber attack leaving MPs unable to access their emails remotely |publisher=Telegraph Media Group |newspaper=The Telegraph |date=24 June 2017 |access-date=24 June 2017 |url-status=live |archive-url=https://web.archive.org/web/20170624180409/http://www.telegraph.co.uk/news/2017/06/24/parliament-hit-sustained-determined-cyber-attack/ |archive-date=24 June 2017 }}</ref>

On 25 June, a Westminster spokesperson confirmed the cyberattack had been an attempt to hack email accounts with weak passwords, but that an investigation had found less than 1% of the 9,000 email addresses associated with parliament had been compromised—a figure representing around 90 email accounts. However, it was still being treated as a serious security breach: "The figure is less than many feared, but is still a breach."<ref>{{cite news |first=Rajeev |last=Syal |url=https://www.theguardian.com/technology/2017/jun/25/parliament-cyber-attack-hits-fewer-than-90-email-accounts |title=Parliament cyber-attack hits fewer than 90 email accounts |publisher=Guardian Media Group |newspaper=The Guardian |date=25 June 2017 |access-date=1 July 2017 |url-status=live |archive-url=https://web.archive.org/web/20170630231632/https://www.theguardian.com/technology/2017/jun/25/parliament-cyber-attack-hits-fewer-than-90-email-accounts |archive-date=30 June 2017 }}</ref> MPs subsequently said that agencies with links to either Russia or North Korea were suspected of being behind the attack.<ref name=Guardian-2017-08-15/>

==Holyrood cyberattack==
On 15 August, officials at Holyrood, home of the Scottish Parliament warned that accounts belonging to Members of the Scottish Parliament (MSPs) were currently the subject of a [[Brute-force attack]] which was attempting to crack weak passwords, but that no accounts had been compromised. However, MSPs were warned they may find themselves temporarily locked out of their accounts for security reasons. News outlets, such as ''{{wipe|The Guardian}}'' reported the attack was similar in nature to the one that had occurred at Westminster.<ref name=Guardian-2017-08-15>{{cite news|url=https://www.theguardian.com/politics/2017/aug/15/scottish-parliament-hit-by-cyber-attack-westminster-assault-holyrood-hackers-email|title=Scottish parliament hit by cyber-attack similar to Westminster assault|first=Severin |last=Carrell |date=15 August 2017|access-date=28 August 2017|newspaper=The Guardian|publisher=Guardian Media Group|url-status=live|archive-url=https://web.archive.org/web/20170827063411/https://www.theguardian.com/politics/2017/aug/15/scottish-parliament-hit-by-cyber-attack-westminster-assault-holyrood-hackers-email|archive-date=27 August 2017}}</ref> The following day officials said that Holyrood was working with the UK's [[Organization:National Cyber Security Centre (United Kingdom)|National Cyber Security Centre]] to increase security measures.<ref>{{cite news|url=https://www.bbc.co.uk/news/uk-scotland-40952247|title=Ongoing Holyrood cyber attack fails to breach security|date=16 August 2017|publisher=BBC|access-date=28 August 2017|work=BBC News|url-status=live|archive-url=https://web.archive.org/web/20170830154356/http://www.bbc.co.uk/news/uk-scotland-40952247|archive-date=30 August 2017}}</ref>

==References==
{{reflist}}

{{Hacking in the 2010s|collapsed}}

{{DEFAULTSORT:Westminster cyberattack, 2017}}
[[Category:Cyberattacks]]




{{Sourceattribution|2017 Westminster cyberattack|1}}