Kensington and Chelsea Council

Summary

Kensington and Chelsea Council was among three London borough councils hit by a coordinated cyberattack that caused widespread disruption to core public services and operational systems. The attack affected Westminster and Hammersmith & Fulham as well, leading to service outages across the impacted authorities. No further specifics about the attack vector or data loss were disclosed in the source.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On November 27, 2025, a coordinated cyberattack targeted three London borough councils, specifically Kensington and Chelsea, Westminster, and Hammersmith & Fulham. The attack led to widespread disruption of core public services and operational systems across the affected councils. The source material does not disclose the nature of the cyberattack, such as the malware used or the attack vector employed. No information about the identity of the attackers or any potential data exfiltration was provided in the available report. The incident was described as part of a broader series of cyber incidents affecting local authorities during that time frame.

The disruption impacted the councils’ ability to deliver essential services to residents, affecting functions that rely on their IT infrastructure. Because the attack caused operational systems to be impaired, services that depend on digital platforms were likely interrupted or degraded. The report does not detail any specific response actions taken by the councils, such as system isolation, recovery efforts, or communication with the public. No further technical details, timelines for restoration, or statements from council officials were included in the source. Consequently, the narrative is limited to the confirmed facts of the date, the coordinated targeting of the three councils, and the resulting widespread service disruption.

Sources

Sources available to members: 1 source.