Employee data leaked during British Library cyber attack

21 November 2023, 11:04

The British Library
London, British Library. Picture: PA

A ransomware group has said it is auctioning off access to the data files.

A cyber attack targeting the British Library has led to a leak of employee data, the institution said.

The Rhysida ransomware group has claimed it has access to passports along with other data files.

The group said it has started bidding in an auction for access at 20 bitcoin (around £600,000) on an online site.

The British Library, which has one of the largest book collections in the world, previously reported that a “major technology outage” had hit online services, public wifi at the site and its website.

It said in October that the National Cyber Security Centre (NCSC) and cybersecurity specialists were investigating.

On Tuesday, an NCSC spokesperson said: “We are working with the British Library to fully understand the impact of an incident.

“Ransomware is the key cyber threat facing the UK, and all organisations should take immediate steps to limit risk by following our advice on how to put in place robust defences to protect their networks.”

The British Library, near St Pancras railway station, remains open and visitors can access the reading rooms for personal study.

On Monday, the library posted a statement to X confirming internal HR files had been leaked.

It said: “We’re continuing to experience a major technology outage as a result of a cyber-attack, affecting our website, online systems and services, and some onsite services too.

“We anticipate restoring many services in the next few weeks, but some disruption may persist for longer.

“Following confirmation last week that this was a ransomware attack, we’re aware that some data has been leaked. This appears to be from our internal HR files.

“We have no evidence that data of our users has been compromised.”

The Information Commissioner’s Office (ICO), the UK’s data protection watchdog, has confirmed it is looking into the breach.

An ICO spokesperson said: “The British Library reported an incident to us and we are making inquiries.”

Last week, the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Centre (MS-ISAC) warned about Rhysida.

In a joint statement they said the group has launched attacks “against the education, healthcare, manufacturing, information technology, and government sectors since May 2023”.

By Press Association

More Technology News

See more More Technology News

A graphic of a robot hand touching a human hand

Experts ‘deeply concerned’ as Government agency drops focus on bias in AI

TikTok is back on US app stores.

TikTok returns to app stores in the US including Apple and Google

Peter Kyle walking past black railings holding a red folder

Rebranded AI Security Institute to drop focus on bias and free speech

A Barclays sign outside a branch

Barclays to hand share award to staff after yearly profit surges by a quarter

A bin of seized knives. A new AI tool from the University of Surrey has been unveiled which could help police forces more quickly identify and trace knives.

New AI tool to identify knives could ‘transform’ policing of knife crime

Former executive chairman of Google Eric Schmidt

Former Google boss warns of ‘extreme risk’ from terrorists posed by AI

A laptop displaying a ‘Matrix’-style screensaver

MPs: Ministers must give protections to creative sector amid AI copyright fears

French President Emmanuel Macron addresses the audience in a closing speech at the Grand Palais during the Artificial Intelligence Action Summit in Paris

Refusal to sign AI declaration was ‘based on what’s best for British people’

Someone at a computer keyboard

Airbnb issues warning over holiday scams fuelled by AI and social media

An HSBC branch

HSBC online and mobile banking working again after service outage

HSBC on growth across the UK

HSBC hit by outage as users complain of being unable to log on

The summit in Paris (Michel Euler/AP)

UK did not sign AI communique over ‘opportunity and security’ concerns – No 10

Sky Glass Gen 2

Sky unveils second generation Sky Glass TV promising ‘better picture and sound’

Technology Stock

UK announces sanctions against Russian cyber crime network

Participants in the AI Action Summit pose for a group photo at the Grand Palais in Paris

UK appears not to have signed leaders’ declaration at AI summit

OpenAI CEO Sam Altman

Sam Altman reiterates OpenAI ‘not for sale’ after Elon Musk-led bid