Dear Sefton Borough Council,

I request the below information under the provisions of FOI 2000. Information indicated that the Coroner’s Office has been affected by a “cyber attack” at some point since May 2019. I therefore request the below:-

- Can you confirm if a cyber-related “attack” has been attempted or indeed been successful which has affected the Coroner’s Office?
- Was any data breached or “stolen” as a result of this attack?
- Has any “cyber attack” on any external service provider to the Coroner’s Office affected the Office itself?

Yours faithfully,

Jonathon Bartlett

Information, Sefton Borough Council

Thank-you for email,

 

If your email concerns something other than a Freedom of Information
request the email account holders will relay this to the relevant Council
Officer.

 

If your e-mail concerns a Freedom of Information request, then please let
this response act as an acknowledgement of your request. The Council aims
to provide you with a response within the FOI Act statutory limit of
twenty working days. The 20 days starts from the first working day after
your request has been received.

 

The provision of requested information is subject to the information not
being exempt under the Act or containing reference to third parties.

 

o If there is any denial or redaction of the requested information we will
contact you to explain.

o There is a possibility that certain questions may attract a cost for the
requestor. This will be considered and you will be informed if a charge is
payable.

o Were there to be a problem in supplying your requested information, we
will contact you for clarification, or discuss the issues.

 

If you require further information on Freedom of Information Requests
generally we suggest you visit the Information Commissioners website or
ring their advice line.

 

Kind regards

This message is intended for named addressees only and may contain
confidential, privileged or commercially sensitive information. If you are
not a named addressee and this message has come to you in error you must
not copy, distribute or take any action on its content. Please return the
message to the sender by replying to it immediately and then delete it
from your computer and destroy any copies of it.

All e-mail communications sent to or from Sefton Metropolitan Borough
Council may be subject to recording and / or monitoring in accordance with
current legislation.

This message does not create or vary any contractual relationship between
Sefton Metropolitan Borough Council and you.

Internet e-mail is not a 100% secure communication medium and Sefton
Metropolitan Borough Council does not accept responsibility for changes
made to this message after it was sent.

Whilst all reasonable care has been taken to ensure that this message is
virus-free, it is the recipient's responsibility to carry out virus checks
as appropriate and ensure that the onward transmission, opening or use of
this message and any attachments will not adversely affect their systems
or data. Sefton Metropolitan Borough Council does not accept any
responsibility in this regard.

Dear Sefton Borough Council,

I hope you’re well. I am emailing to see if there is any response to my FOI request? The anticipated return date was some 3 weeks ago.

Yours faithfully,

Jonathon Bartlett

Jonathon Bartlett

Dear Sefton Borough Council,

I hope you’re well. I send a further follow up to my FOI submitted mid-November 2019 in relation to “cyber attacks”. Can you please provide an update? A response was expected in December 2019.

Yours faithfully,

Jonathon Bartlett

Sefton Council, Sefton Borough Council

1 Atodiad

Information request
Our reference: 3396225

--------------------------------------------------------------------------

 
Dear Mr Bartlett
 
Thank you for your request for information received on 13 November 2019.
 
Please find attached our response to your request.
 
Yours sincerely
 
Helen Toplis
 
 
NOTE: Please do not edit the subject line when replying to this email.

Jonathon Bartlett

Dear Sefton Borough Council,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Sefton Borough Council's handling of my FOI request '“Cyberattack” on Sefton MBC'.

The rational for the refusal of my request was that it "provide the opportunity for members of the general public to breach Sefton Council’s ICT security. " I would disagree with this rationale and indeed, asking whether any cyber-relates attacks have been attempted or been successful, I do not feel, would provide such an opportunity. Using the analogy of offline situations, if I were to have asked about whether any council buildings had been broken into, this would not 'provide the opportunity for members of the general public to breach Sefton' council buildings and therefore, I think the rationale within this analogy should transfer over to the 'cyber' world too. Indeed, if I were to ask specifics around the attack methods, vulnerabilities identified etc, indeed I do agree with this rationale that it would provide an opportunity (although I would hope that any vulnerabilities had been addressed) however by simply providing confirmation or negation do not actually offer any vectors for the 'public' to exploit; my request merely relates to 'yes' and 'no' answers.

I would therefore ask for the refusal rationale to be considered bearing in mind the analogy I provide above and an internal review be conducted.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/c...

Yours faithfully and thank you in advance,

Jonathon Bartlett

Information, Sefton Borough Council

Thank-you for email,

 

If your email concerns something other than a Freedom of Information
request the email account holders will relay this to the relevant Council
Officer.

 

If your e-mail concerns a Freedom of Information request, then please let
this response act as an acknowledgement of your request. The Council aims
to provide you with a response within the FOI Act statutory limit of
twenty working days. The 20 days starts from the first working day after
your request has been received.

 

The provision of requested information is subject to the information not
being exempt under the Act or containing reference to third parties.

 

o If there is any denial or redaction of the requested information we will
contact you to explain.

o There is a possibility that certain questions may attract a cost for the
requestor. This will be considered and you will be informed if a charge is
payable.

o Were there to be a problem in supplying your requested information, we
will contact you for clarification, or discuss the issues.

 

If you require further information on Freedom of Information Requests
generally we suggest you visit the Information Commissioners website or
ring their advice line.

 

Kind regards

This message is intended for named addressees only and may contain
confidential, privileged or commercially sensitive information. If you are
not a named addressee and this message has come to you in error you must
not copy, distribute or take any action on its content. Please return the
message to the sender by replying to it immediately and then delete it
from your computer and destroy any copies of it.

All e-mail communications sent to or from Sefton Metropolitan Borough
Council may be subject to recording and / or monitoring in accordance with
current legislation.

This message does not create or vary any contractual relationship between
Sefton Metropolitan Borough Council and you.

Internet e-mail is not a 100% secure communication medium and Sefton
Metropolitan Borough Council does not accept responsibility for changes
made to this message after it was sent.

Whilst all reasonable care has been taken to ensure that this message is
virus-free, it is the recipient's responsibility to carry out virus checks
as appropriate and ensure that the onward transmission, opening or use of
this message and any attachments will not adversely affect their systems
or data. Sefton Metropolitan Borough Council does not accept any
responsibility in this regard.

Sefton Council, Sefton Borough Council

1 Atodiad

Information request
Our reference: 3396225

--------------------------------------------------------------------------

Dear Mr Bartlett
 
Please see attached response.
 
Yours sincerely
 
Business Intelligence Team