When was the Oxford City Council data breach discovered?

The data breach was detected over the weekend of June 7-8, 2025. Following detection, Oxford City Council immediately engaged external cybersecurity specialists and took down all main systems to conduct security checks.

What systems were targeted in the Oxford City Council attack?

The attack specifically targeted legacy systems containing sensitive employee data. These systems contained historic data spanning over two decades, from 2001 to 2022.

What type of data was compromised in the Oxford City Council breach?

Exposed data includes personal information of election workers from 2001-2022, personal details of poll station workers and ballot counters, data belonging to current and former council officers, and historic records stored on legacy systems spanning 21 years.

How many people were affected by the Oxford City Council breach?

The number of affected individuals has not been disclosed by Oxford City Council. The organization is still investigating the full scope of the breach and continues to identify all potentially impacted individuals.

What type of cyberattack hit Oxford City Council?

The nature of the attack has not been disclosed by Oxford City Council. The organization has not provided details about whether it was ransomware, data theft, or another type of cyberattack.

Has any stolen data been shared with third parties?

Oxford City Council claims there is no evidence to suggest that any of the accessed information has been shared with third parties. However, investigations continue to identify what was accessed and whether any data was extracted from their systems.

What response actions did Oxford City Council take?

Following detection, Oxford City Council engaged external cybersecurity specialists, took down all main systems to conduct security checks, began individually contacting potentially affected people, and reported the incident to relevant government authorities and law enforcement agencies as required by data protection regulations.

Why were legacy systems particularly vulnerable in this attack?

Legacy systems often contain decades of historical data but may lack modern security protections and regular updates. In Oxford City Council's case, these systems contained 21 years of sensitive election worker data from 2001-2022, making them attractive targets for attackers seeking historic personal information. The age and potential security limitations of these systems may have made them easier to compromise than more modern, regularly updated systems.

Incident

Oxford City Council hit by cyberattack exposing two decades of employee data

Q: What happened to Oxford City Council?

Oxford City Council reported a data breach that was detected over the weekend of June 7-8, 2025. The attack targeted legacy systems containing sensitive employee data and caused disruption to council services for more than a week.

Q: Which council services were affected by the cyberattack?

The attack caused significant service disruptions affecting housing, planning, waste collection, environmental health, and election services across the city. Services were disrupted for more than a week while security checks were conducted.

Q: Who was affected by the Oxford City Council data breach?

The breach affected individuals who worked on Oxford City Council-administered elections between 2001 and 2022. The majority of those impacted are current or former council officers, including poll station workers and ballot counters.

published: June 22, 2025

Learn More

Oxford City Council is reporting a data breach that was detected over the weekend of June 7-8, 2025.

The attack targeted legacy systems containing sensitive employee data and caused disruption to council services for more than a week. Following the detection, Oxford City Council engaged external cybersecurity specialists and took down all main systems to conduct security checks and investigate the incident. This caused significant service disruptions affecting housing, planning, waste collection, environmental health, and election services across the city.

The attack compromised historic data stored on legacy systems, affecting individuals who worked on Oxford City Council-administered elections between 2001 and 2022. The majority of those impacted are current or former council officers, including poll station workers and ballot counters. Exposed data includes:

Personal information of election workers from 2001-2022
Personal details of poll station workers and ballot counters
Data belonging to current and former council officers
Historic records stored on legacy systems spanning 21 years

The number of affected indivuduals and the nature of the attack are not disclosed.

The council claims there is no evidence to suggest that any of the accessed information has been shared with third parties. Investigations continue to identify what was accessed and whether any data was extracted from their systems.

Oxford City Council has begun individually contacting people potentially affected by the breach to explain what happened, outline available support resources, and detail the steps being taken to prevent similar incidents in the future. The organization has reported the incident to relevant government authorities and law enforcement agencies as required by data protection regulations.

Oxford City Council hit by cyberattack exposing two decades of employee data

Read More
Clark County, Washington suspects hacker attack
Hunters International Ransomware Gang claims breach US Marshals …
City of Fort St. John reports ransomware attack
Libraries managed by Woolhara Council hit by cyberattack, …
First official war effort hack: Ukranian intelligence services …