Three major London councils are grappling with significant disruption after a serious cyber attack last week, with evidence suggesting residents' personal data was copied and taken. Kensington and Chelsea Council, Westminster City Council, and Hammersmith and Fulham Council were all targeted in the incident, which began on Monday, November 24, 2025.
What Happened in the Cyber Attack?
The attack is understood to have originated within the shared IT systems used by Kensington and Chelsea Council. In a public update, that council confirmed it has evidence showing data was copied and taken from its systems. It believes the breach involves historical data and has warned that this information "could end up in the public domain".
All three local authorities are now working with the National Crime Agency (NCA), the Metropolitan Police's Cyber Crime Unit, and the National Cyber Security Centre (NCSC). The Information Commissioner's Office (ICO) has also been informed, a step experts say indicates a potentially serious data loss incident.
Which Council Services Are Currently Affected?
Residents across the three boroughs are facing ongoing issues as councils work to restore systems safely. Officials warn it could take several weeks to return to full normal operations.
Hammersmith and Fulham Council Services Disrupted:
The council has provided a specific list of services experiencing problems:
- Birth, marriage, and death certificates: Unable to process applications for certificates registered before 2006.
- My Account and online forms: Unavailable. This affects council tax, benefits, housing online portals, business rates, and repair reporting.
- Payments: Online and phone payments are possible, but account balances may not be up-to-date.
- Parking Fines (PCNs): May not be payable online.
- Property Licensing: The application form is currently offline.
Kensington and Chelsea Council reported that a number of its systems are down, including some phone lines and parts of its website. Westminster City Council stated that while most services are running, significant delays are expected, and restoring systems is a "complex process".
Despite the chaos, critical services are being prioritised. A memo from Westminster City Council confirmed that shared Adult Social Care and Children’s Services are operating as usual, and emergency out-of-hours support remains active.
What Should Residents Do Now?
The councils and cyber security experts have issued clear guidance for concerned residents.
Kensington and Chelsea Council has urged people to be extra vigilant against phishing attempts via phone, email, or text. They specifically advise anyone who has purchased something from the council, like a parking permit, to monitor their bank accounts for suspicious activity.
All residents are directed to the National Cyber Security Centre's (NCSC) website for official advice on keeping data safe and steps to take following a data breach.
For urgent issues, residents can still contact the councils:
- Westminster City Council: General emergencies: 020 7641 6000; Housing: 0800 358 3783.
- Kensington and Chelsea Council: Customer services are open, though staff access to systems is limited.
The investigation into the attack is ongoing, with no arrests made at this early stage. Councils have activated business continuity plans, but warn of at least two further weeks of significant disruption as recovery efforts continue.
