Cyber-attack August 2017

Cyber Matters made this Freedom of Information request to Copeland Borough Council

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was refused by Copeland Borough Council.

Dear Copeland Borough Council,

We are submitting the following Freedom of Information Request under the Freedom of Information Act 2000 to obtain the following details on your cyber-attack reported @ https://www.bbc.com/news/uk-england-cumb...

1) Any cyber security awareness training provided to staff during the 2 years preceding the cyber-attack including dates and the number of staff trained
2) The number of cyber security incidents that caused the loss/breach of data during the 5 years before the cyber-attack including dates
3) Name and role of IT Manager(s) / Officer(s) primarily responsible for cyber security at the point of the cyber-attack
4) Names of all vendor(s) used at the time of the cyber-attack for:
(a) anti-virus
(b) infrastructure vulnerability scanning
(d) infrastructure firewalls
(e) web app firewalls
5) For each month following the cyber-attack until the date of response to this FOI:
a) name of each expert engaged to assist in cyber recovery
b) the organisations each was sourced from
c) the cyber recovery projects each was involved in over the previous 5 years
6) A breakdown of the £2 million spent following the cyber-attack

Yours faithfully,

Cyber Matters

info@copeland.gov.uk, Copeland Borough Council

Hello [FOI #533203 email],
You've contacted us outside our regular hours of operation.
Please expect a response during our regular business hours.

Thank you.

Copeland - the best place to live in Cumbria This email is confidential
and is for the attention of the addressee only. Copeland Borough Council
accept no responsibility for information, errors or omissions contained in
it. We make every effort to keep our network free from viruses. You should
independently check this e-mail and any attachments for viruses, as we can
take no responsibility for any computer viruses that might be transferred
by way of this e-mail.

Copeland Borough Council

1 Attachment

Dear Cyber Matters
 
Thank you for your Freedom of Information Request.  Your request for
information has been forwarded on to our Freedom of Information Officer,
who will respond to your request as soon as possible, and not later than
20 days after receiving your request.
 
Yours sincerely,
 
Kathryn 

Customer Services Officer
 
Tel: 01946 598300
Email: [1][Copeland Borough Council request email]
Website: [2]www.copeland.gov.uk
Copeland Borough Council, Market Hall, Market Place, Whitehaven, Cumbria,
CA28 7JG. Tel: 01946 598300. Fax: 01946 598303. [3]www.copeland.gov.uk,
[4][Copeland Borough Council request email]
 

 Working to improve lives, communities and the prosperity of Copeland
 

show quoted sections

Please use this email address for all replies to this request:
[FOI #533203 email]

Is [Copeland Borough Council request email] the wrong address for Freedom of Information
requests to Copeland Borough Council? If so, please contact us using this
form:
https://emea01.safelinks.protection.outl...

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
https://emea01.safelinks.protection.outl...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
https://emea01.safelinks.protection.outl...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

-------------------------------------------------------------------
Copeland - the best place to live in Cumbria This email is confidential
and is for the attention of the addressee only. Copeland Borough Council
accept no responsibility for information, errors or omissions contained in
it. We make every effort to keep our network free from viruses. You should
independently check this e-mail and any attachments for viruses, as we can
take no responsibility for any computer viruses that might be transferred
by way of this e-mail.

References

Visible links
1. mailto:[Copeland Borough Council request email]
2. http://www.copeland.gov.uk/
3. http://www.copeland.gov.uk/
4. mailto:[Copeland Borough Council request email]

Clifford Walker, Copeland Borough Council

1 Attachment

Dear Cyber Matters,

 

I acknowledge receipt of your Request for Information under the Freedom of
Information Act 2000.

 

Your request is being considered and you will receive any recorded
information held by Copeland Borough Council within the statutory
timescale of 20 working days as defined by the Freedom of Information Act
2000, subject to the information not being exempt or containing a
reference to a third party.

 

For your information, the Act defines a number of exemptions, which may
prevent release of the information you have requested.  There will be an
assessment and if any of the exemption categories apply then the
information will not be released.  You will be informed if this is the
case, including your rights of appeal.

 

If the information you request contains reference to a third party then
they may be consulted prior to a decision being taken on whether or not to
release the information to you.  You will be informed if this is the case.

 

There may be a fee payable for this information.  This will be considered
and you will be informed if a fee is payable.  In this event the fee must
be paid before the information is processed and released.  The 20 working
day time limit for responses is suspended until receipt of the payment.

 

If you have any queries or concerns then please contact me.

 

Further information is also available from the Information Commissioner
at:

 

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Telephone 01625 545700

[1]https://ico.org.uk/

 

Yours sincerely

 

 

 

Cliff Walker

Information Governance and Data Protection Officer

Copeland Borough Council

 

Tel: 01946 59 8529

Email: [2][email address]

 

Copeland Borough Council, The Copeland Centre, Catherine Street,
Whitehaven, Cumbria, CA28 7SJ. Tel: 01946 598300. Fax: 01946 598303.
[3]www.copeland.gov.uk, [4][Copeland Borough Council request email]

[5]Description: cid:image001.png@01CE1E6D.7E7E5480

Working to improve lives, communities and the prosperity of Copeland

 

 

show quoted sections

Please use this email address for all replies to this request:
[9][FOI #533203 email]

Is [10][Copeland Borough Council request email] the wrong address for Freedom of Information
requests to Copeland Borough Council? If so, please contact us using this
form:
[11]https://emea01.safelinks.protection.outl...

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[12]https://emea01.safelinks.protection.outl...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[13]https://emea01.safelinks.protection.outl...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

-------------------------------------------------------------------

Copeland - the best place to live in Cumbria This email is confidential
and is for the attention of the addressee only. Copeland Borough Council
accept no responsibility for information, errors or omissions contained in
it. We make every effort to keep our network free from viruses. You should
independently check this e-mail and any attachments for viruses, as we can
take no responsibility for any computer viruses that might be transferred
by way of this e-mail.

References

Visible links
1. https://ico.org.uk/
2. mailto:[email address]
3. http://www.copeland.gov.uk/
4. mailto:[email address]
6. mailto:[FOI #533203 email]
7. mailto:[Copeland Borough Council request email]
8. https://emea01.safelinks.protection.outl...
9. mailto:[FOI #533203 email]
10. mailto:[Copeland Borough Council request email]
11. https://emea01.safelinks.protection.outl...
12. https://emea01.safelinks.protection.outl...
13. https://emea01.safelinks.protection.outl...

Dear Copeland Borough Council,

Please pass this on to the person who conducts Freedom of Information reviews.

We are writing to request an internal review of Copeland Borough Council's handling of our FOI request 'Cyber-attack August 2017'.

We ask that the review investigate why our FOI has not been answered within the timescales required by law.

A full history of our FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/c...

Yours faithfully,

Cyber Matters

info@copeland.gov.uk, Copeland Borough Council

Hello [FOI #533203 email],
You've contacted us outside our regular hours of operation.
Please expect a response during our regular business hours.

Thank you.

Copeland - the best place to live in Cumbria This email is confidential
and is for the attention of the addressee only. Copeland Borough Council
accept no responsibility for information, errors or omissions contained in
it. We make every effort to keep our network free from viruses. You should
independently check this e-mail and any attachments for viruses, as we can
take no responsibility for any computer viruses that might be transferred
by way of this e-mail.

Copeland Borough Council

1 Attachment

Good morning 
 
Thank you for your Freedom of Information Request.  Your request for
information has been forwarded on to our Freedom of Information Officer,
who will respond to your request as soon as possible, and not later than
20 days after receiving your request.
 
Yours sincerely,
 
Customer Services Officer
 
Tel: 01946 598300
Email: [1][Copeland Borough Council request email]
Website: [2]www.copeland.gov.uk
Copeland Borough Council, Market Hall, Market Place, Whitehaven, Cumbria,
CA28 7JG. Tel: 01946 598300. Fax: 01946 598303. [3]www.copeland.gov.uk,
[4][Copeland Borough Council request email]
 

 
Working to improve lives, communities and the prosperity of Copeland
 



 

--------------------------------------------------------------------------

From: Cyber Matters <[FOI #533203 email]>
Date: Sunday, 20 January 2019, 12:36:48
To: FOI requests at Copeland Borough Council <[Copeland Borough Council request email]>
Subject: Internal review of Freedom of Information request - Cyber-attack
August 2017
Dear Copeland Borough Council,

Please pass this on to the person who conducts Freedom of Information
reviews.

We are writing to request an internal review of Copeland Borough Council's
handling of our FOI request 'Cyber-attack August 2017'.

We ask that the review investigate why our FOI has not been answered
within the timescales required by law.

A full history of our FOI request and all correspondence is available on
the Internet at this address:
https://emea01.safelinks.protection.outl...

Yours faithfully,

Cyber Matters

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #533203 email]

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
https://emea01.safelinks.protection.outl...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
https://emea01.safelinks.protection.outl...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

show quoted sections

Clifford Walker, Copeland Borough Council

2 Attachments

Dear Cyber Matters,

 

Thank you for contacting Copeland Borough Council with your request for an
Internal Review.

This has been assigned to a caseworker. We will aim to send you a full
response by 20 February 2019 which is twenty working days from the date we
received your request.

If you have any questions then please do not hesitate to contact me.

 

Regards,

 

 

Cliff Walker

Information Governance and Data Protection Officer

Copeland Borough Council

 

Tel: 01946 59 8529

Email: [1][email address]

 

Copeland Borough Council, The Copeland Centre, Catherine Street,
Whitehaven, Cumbria, CA28 7SJ. Tel: 01946 598300. Fax: 01946 598303.
[2]www.copeland.gov.uk, [3][Copeland Borough Council request email]

[4]Description: cid:image001.png@01CE1E6D.7E7E5480

Working to improve lives, communities and the prosperity of Copeland

 

From: Info <[Copeland Borough Council request email]>
Sent: 21 January 2019 09:29
To: Cyber Matters <[FOI #533203 email]>
Subject: RE: Internal review of Freedom of Information request -
Cyber-attack August 2017

 

Good morning 

 

Thank you for your Freedom of Information Request.  Your request for
information has been forwarded on to our Freedom of Information Officer,
who will respond to your request as soon as possible, and not later than
20 days after receiving your request.

 

Yours sincerely,

 

Customer Services Officer

 

Tel: 01946 598300

Email: [5][Copeland Borough Council request email]

Website: [6]www.copeland.gov.uk

Copeland Borough Council, Market Hall, Market Place, Whitehaven, Cumbria,
CA28 7JG. Tel: 01946 598300. Fax: 01946 598303. [7]www.copeland.gov.uk,
[8][Copeland Borough Council request email]

 



 

Working to improve lives, communities and the prosperity of Copeland

 



 

--------------------------------------------------------------------------

From: Cyber Matters <[9][FOI #533203 email]>
Date: Sunday, 20 January 2019, 12:36:48
To: FOI requests at Copeland Borough Council <[10][Copeland Borough Council request email]>
Subject: Internal review of Freedom of Information request - Cyber-attack
August 2017

Dear Copeland Borough Council,

Please pass this on to the person who conducts Freedom of Information
reviews.

We are writing to request an internal review of Copeland Borough Council's
handling of our FOI request 'Cyber-attack August 2017'.

We ask that the review investigate why our FOI has not been answered
within the timescales required by law.

A full history of our FOI request and all correspondence is available on
the Internet at this address:
[11]https://emea01.safelinks.protection.outl...

Yours faithfully,

Cyber Matters

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[12][FOI #533203 email]

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[13]https://emea01.safelinks.protection.outl...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[14]https://emea01.safelinks.protection.outl...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

show quoted sections

Marissa Joyce, Copeland Borough Council

1 Attachment

Dear Cyber Matters,

 

Further to Mr Walker’s previous response of 21 January 2019 in which he
acknowledges your request for an internal review, I have now concluded
that review and have come to the following decision.

 

Firstly, I would like to apologise on behalf of the Council that your
original request was not handled within timescale, I appreciate it may be
of little comfort to you but I can assure you that this is rarely the
case.  

 

The council will not release the information you have requested as we
believe that providing this information is likely to indicate how we
manage our internal secure systems which could make its systems vulnerable
to malicious attacks.

 

The Exemption being applied is Section 31(1)
(a) - the prevention or detection of crime. The application of section
31 is subject to a Public Interest Test which
the council considered as follows: 

Arguments in favour of disclosure: 

• The council has a duty to
be transparent about its systems and processes. 
 
Arguments against disclosure: 

• The council has a duty to ensure personal data is kept secure. 
• Theft of data, including personal data and sensitive
personal data may lead to other crimes including fraud or digital vandalism. 
• A malicious attack could lead to loss or corruption of data which would
impact negatively on the council’s ability to
provide essential services.  
 
On balance, the council believes
that the public interest arguments in favour of non-disclosure
outweigh the arguments in favour of disclosure. 
 
This concludes my Internal Review of your request for information.
 However, if you remain dissatisfied with the outcome, you may apply to
the Information Commissioner’s Office for an independent review of the way
the Council has handled your request. You can contact the Information
Commissioner at The Information Commissioner’s Office, Wycliffe House,
Water Lane, Wilmslow, Cheshire SK9 5AF.

Yours sincerely,

 

Marissa Joyce

Customer Relations Officer

Governance and Commercial

Copeland Borough Council

 

Tel: 01946 598525

[1][email address]

 

Please note my normal working hours are Tuesday to Thursday 9.00am until
5.00pm.

 

Copeland Borough Council, The Copeland Centre, Catherine Street,
Whitehaven, Cumbria, CA28 7SJ. Tel: 01946 598300. Fax: 01946 598303.
[2]www.copeland.gov.uk, [3][Copeland Borough Council request email]

 

[4]Description: Description: Copeland and LGC Award logos 2

Working to improve lives, communities and the prosperity of Copeland

 

 

 

--------------------------------------------------------------------------

From: Cyber Matters <[5][FOI #533203 email]>
Date: Sunday, 20 January 2019, 12:36:48
To: FOI requests at Copeland Borough Council <[6][Copeland Borough Council request email]>
Subject: Internal review of Freedom of Information request - Cyber-attack
August 2017

Dear Copeland Borough Council,

Please pass this on to the person who conducts Freedom of Information
reviews.

We are writing to request an internal review of Copeland Borough Council's
handling of our FOI request 'Cyber-attack August 2017'.

We ask that the review investigate why our FOI has not been answered
within the timescales required by law.

A full history of our FOI request and all correspondence is available on
the Internet at this address:
[7]https://emea01.safelinks.protection.outl...

Yours faithfully,

Cyber Matters

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[8][FOI #533203 email]

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[9]https://emea01.safelinks.protection.outl...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[10]https://emea01.safelinks.protection.outl...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

show quoted sections