Cyber-attack information

Jordan Gifford made this Freedom of Information request to University of Reading

This request has been closed to new correspondence. Contact us if you think it should be reopened.

The request was successful.

Dear University of Reading, could you please forward these questions onto the correct department and/or personnel.

1) Between September 2016 - December 2017, has your university been targeted via a cyber-attack?
A) - Yes
B) - No

2) Between September 2016 - December 2017, how many cyber-attacks has your university encountered?
A) - Under 50 attacks
B) - 50 - 100 attacks
C) - 150 - 200 attacks
D) - Greater than 200 attacks

3) Between September 2016 - December 2017, which cyber-attacks has your university encountered? (Please choose which are applicable.)
A) - Phishing attacks
B) - Spear phishing attacks
C) - Ransomware attacks
D) - SQL injection attacks
E) - Rootkit attacks

4) How many phishing attacks has your university encountered?
(Please base your answer between September 2016 - December 2017.)
A) - Under 100 attacks
B) - 100 - 200 attacks
C) - 300 - 400 attacks
D) - Greater than 400 attacks

5) From research, many universities across the country have been targeted via a number of phishing campaigns. What impact have they had on your university?

6) From research, there has been successful phishing campaigns across many universities. When considering that both students and lecturers can be victims, who has been affected the most?
A) - Students
B) - Lecturers

7) How many targeted spear phishing attacks has your university encountered?
A) - Under 25 attacks
B) - 25 - 50 attacks
C) - 50 - 75 attacks
D) - 75 - 100 attacks
E) - Greater than 100 attacks

8) What impact has spear phishing attacks had on your university?

9) How many ransomware attacks has your university encountered?
(Please base your answer between September 2016 - December 2017.)
A) - Under 25 attacks
B) - 25 - 50 attacks
C) - 50 - 75 attacks
D) - 75 - 100 attacks
E) - Over 100 attacks

10) When a Ransomware attack was triggered, how quickly was it resolved?
A) - Resolved Immediately
B) - Resolved within and under 24 hours
C) - Resolved between 1 - 2 days
D) - Resolved after 3 or more days

11) Considering that ransomware affects the availability of a system or systems,
please describe the impact that ransomware has had on your university institution.

12) How many SQL injection attacks has your university encountered?
(when contemplating the number of attacks, please include attempted attacks and
unfortunate successful attacks and Please base your answer between September 2016 - December 2017.)

A) - Under 100 attacks
B) - 100 - 200 attacks
C) - 200 - 300 attacks
D) - 300 - 400 attacks
E) - Over 400 attacks

13) What impact has SQL injection attacks had on your university?

14) How many rootkit attacks has your university encountered?
A) - Under 5 attacks
B) - 5 - 10 attacks
C) - 10 - 20 attacks
D) - Over 20 attacks

15) What impact has rootkit attacks had on your university?

16) When considering the different types of cyber-attacks, that many university institutions are targeted with, how would you class your current and existing security controls?
A) - Inadequate
B) - Good
C) - Adequate
D) - Excellent

17) Do you believe your existing and current IT infrastructure will protect you from cyber-attacks that may occur in the next 18 months?
A) - Yes
B) - No

18) Should more funding be given to IT Security to help improve and maintain the current security that is already in place within your university institution?
A) - Yes
B) - No

Yours faithfully,
Jordan Gifford

IMPS, University of Reading

Dear Mr Gifford,

This is to acknowledge receipt of your request for information below and to let you know it is being processed.

We'll get back to you as soon as we can, but in any case within 20 working days from 01/02/2018.

In the meantime, if you wish to add any further details or check on progress, please reply to this message, without altering the 'Subject:' line, so that we can track your input and respond promptly, (IMPS#02088).

Yours sincerely,

Sinead Latham

Information Management & Policy Services (IMPS), University of Reading, Whiteknights, Reading, RG6 6AH
t: +44 (0)118 378 8981 www.reading.ac.uk/foia

show quoted sections

IMPS, University of Reading

Dear Mr Gifford,

We have completed the compilation of information in response to your request.

We can confirm that we do hold some information of the description specified in your request. Our responses are given below each limb of your request below.

We are required to include details of our complaints procedures, including your rights to apply to the Information Commissioner. The procedure is detailed in our Freedom of Information and Environmental Information Regulations policy on the web at www.reading.ac.uk/freedom-of-information...

If we are unable to resolve any complaint, you can complain to the Information Commissioner, the independent body who oversees the access to information regimes:

Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Email: [email address]

Yours sincerely


Rebecca Daniells
IMPS Officer

Information Management & Policy Services (IMPS), University of Reading, Whiteknights, Reading, RG6 6AH
[University of Reading request email] t: +44 (0)118 378 8981 www.reading.ac.uk/foia

show quoted sections