UK Ransomware Tracker

Ransomware attack halted ordering, shipping and call-centre operations across Asahi's European and Japanese businesses, including UK subsidiary Fuller's parent operations.

Ransomware group Radiant published photos and profiles of nursery children, including safeguarding notes and parent contact details, in an extortion attempt.

Ransomware attack on Collins Aerospace's MUSE passenger processing software caused widespread flight delays and cancellations at Heathrow and other European airports.

Cyber attack halted vehicle production at UK plants for several weeks. Categorised by the Cyber Monitoring Centre as a Category 3 systemic event with estimated economic impact of £1.9bn.

Customer data exposed via a breach at a third-party marketing supplier. Lidl notified affected customers and the ICO.

Attackers accessed customer contact information via a third-party customer service provider. No payment data or passwords affected.

Significant volume of personal data of legal aid applicants stolen, including criminal history, employment status and financial information. Digital service taken offline.

Ransomware attack on a UK chilled-food distributor supplying Tesco, Sainsbury's, Aldi and M&S caused significant supply chain disruption.

Attackers exfiltrated data of all 6.5 million Co-op members. Store systems, payments and stock disrupted across the UK.

Third UK retailer targeted in a wave of Scattered Spider-linked attacks following M&S and Co-op. Restricted internet access at sites as a precaution.

Ransomware attack disrupted online orders, contactless payments and click-and-collect for weeks. Customer personal data (not payment card or password data) confirmed taken.

ICO issued monetary penalty following the 2023 Capita cyber incident that exposed pension scheme member data across multiple UK trustees.

Further tranche of patient and staff data published by INC Ransom following the 2024 NHS Dumfries and Galloway attack. Confirmed by NHS Scotland and Police Scotland.

Further patient data from the June 2024 Synnovis ransomware attack surfaced on leak sites, prompting renewed NHS notifications to affected London patients.

LockBit ransomware attack disrupted international mail services for 6+ weeks

Rhysida ransomware attack caused £7M in damages and months of disruption

Luxury car manufacturer targeted in cyber attack

UK supermarket chain hit by significant cyber attack

Major UK retailer suffered cyber attack affecting millions of customers