Ransomware attacks

City of London Police Authority did not have the information requested.

Dear City of London Police Authority,

Does your organisation install anti-virus software or endpoint protection on network devices?
a. Yes
b. No

Has your organisation suffered a ransomware attack in the last 12 months, in which an external hacker encrypted a PC or device or network within your organisation and demanded payment in order to decrypt the device?
a. Yes
b. No

If yes
In the past 12 months, how many ransomware attacks has your organisation had to defend against?
a. 1-2 attacks
b. 3-4 attacks
c. 5-6 attacks
d. 7-8 attacks
e. 9-10 attacks
f. More than 10 attacks (please specify)____________

Do you know how the ransomware attacker gained access to your organisation’s network?
• Phishing via email or social media network
• Drive-by-download caused by clicking on a compromised website
• Infection via a computer that was part of a botnet
• Other (please specify)

How far did the most successful ransomware attack get when targeting your organisation’s data?
• The attacker was unable to successfully encrypt any files/data
• The attacker was able to encrypt some files/data

What type of data has been affected by ransomware attackers in the past 12 months?
• Employee information
• Inmate information
• Payroll/HR
• Financial data
• All data was targeted

Of the ransomware attacks your organisation has experienced in the last 12 months, has your organisation paid the ransom demanded?
• Yes, my organisation paid the ransom every time
• Yes, my organisation has paid some ransoms but not all
• No ransom was paid

Has your organisation been able to identify the attacker in any of the ransomware attacks on your organisation, and if so who was the attacker?
• Organised cyber-criminals
• Opportunistic hackers (non-organised)
• Political hacktivists
• Disgruntled employees/former employees
• State sponsored hackers
• Other (please specify)____

Was your organization hit by the WannaCry ransomware attack in May 2017?
• Yes
• No

Yours faithfully,

Kelly Friend

COL - EB - Information Officer, City of London Police Authority

Dear Kelly Friend,

FREEDOM OF INFORMATION ACT 2000 (FOIA) - REQUEST FOR INFORMATION

Following your request of 12 June 2017, the City of London (CoL) responds as follows.

The CoL assumes that your request relates to the City of London Police Force. In accordance with section 1 of the FOIA, the CoL confirms that it does not hold the information you have requested, including in its capacity as a police authority.

This level of detail would not normally be held by the CoL as a local authority or police authority. It would be held by the City of London Police.

Please note that the CoL is the local authority and police authority for the ‘Square Mile’ only, ie the historic City of London, and not for London as a whole, ie ‘Greater London’, which is administered by the City of Westminster and over 30 London boroughs, with the Greater London Authority (GLA) having some overarching responsibilities. Please see the following page containing a link to a map (Explore the City), which shows the local and police authority area covered by the CoL:
https://www.cityoflondon.gov.uk/maps/Pag....

In addition, the CoL as a local authority and police authority is legally a separate body from the City of London Police for the purpose of compliance with the FOIA. In addition, please note that the City of London Police is the Police Force for the Square Mile. Beyond this, the Metropolitan Police Force (commonly referred to as ‘the MET’) is the Police Force for the rest of London (‘Greater London’). The rest of England is covered by various other police forces.

In so far as you require the information for the “Square Mile”, you may wish to contact the City of London Police. The FOI email address for the City of London Police is:
[email address]<mailto:[email address]>
Further information can be found at:
http://www.cityoflondon.police.uk/CityPo....

The contact details for the MET are at:
http://www.met.police.uk/information/.

For police forces for the rest of the UK, please see the following webpage:
https://www.police.uk/forces/.

We hope that this response is of assistance.

If you wish to make a complaint about the way the CoL has managed your enquiry, please make your complaint in writing to email address: [email address]<mailto:[email address]>. For a link to the CoL’s FOI complaints procedure, please visit the following page: www.cityoflondon.gov.uk/Feedback<http://www.cityoflondon.gov.uk/Feedback>, at the end of which is located the FOI complaints procedure. If, having used the CoL’s FOI Complaints Procedure, you are still dissatisfied, you may request the Information Commissioner to investigate. Please contact: Information Commissioner, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: (01625) 545700. Website: http://www.ico.org.uk/<http://www.ico.gov.uk/>.

The FOIA applies to the CoL as a local authority, police authority and port health authority.

The CoL holds the copyright in this communication. Its supply does not give a right to re-use in a way that would infringe that copyright, for example, by making copies, publishing and issuing copies to the public or to any other person. Brief extracts of any of the material may be reproduced under the fair dealing provisions of the Copyright, Designs and Patents Act 1988 (sections 29 and 30) for the purposes of research for non-commercial purposes, private study, criticism, review and news reporting, subject to an acknowledgement of the copyright owner.

Yours sincerely,

Information Officer
Comptroller & City Solicitor’s Department
City of London
Tel: 020-7332 1209
www.cityoflondon.gov.uk<http://www.cityoflondon.gov.uk>

show quoted sections