Parliament has been hit by a cyberattack, days after an online group claimed it had hacked ministers’ email accounts.
An email sent to parliamentarians on Friday and shown to Sky News said: « Earlier this morning we discovered unusual activity and evidence of an attempted cyberattack on our computer network.
« Closer investigation by our team confirmed that hackers were carrying out a sustained and determined attack on all parliamentary user accounts in an attempt to identify weak passwords.
« These attempts specifically were trying to gain access to users’ emails. »
Senior MPs have said they still cannot access their emails today and have been warned that more services could be made unavailable as they « continue to work through security processes ».
A House of Commons spokeswoman said: « We are continuing to investigate this incident and take further measures to secure the computer network, liaising with the National Cyber Security Centre.
« We have systems in place to protect member and staff accounts and are taking the necessary steps to protect our systems. »
The lack of remote access to emails was not part of the attack but was due to measures taken by those trying to deal with the incident.
« Parliament has disabled remote access to protect the network, » she said.
Sky’s Home Affairs Editor Mark White said: « It comes just a few days after an online group claimed it had hacked the email accounts and passwords of Government ministers and was offering that for sale.
« It comes just a month after that huge ransomware attack that affected many NHS trusts across the UK. »
International Trade Secretary Liam Fox said: « We know there are regular attacks by hackers attempting to get passwords.
« We’ve seen reports in the last few days of even cabinet ministers’ passwords being for sale online.
« It is not at all surprising that there should be an attempt to hack into parliamentary emails and it is a warning to everybody, whether they are in Parliament or elsewhere, that they need to do everything possible to maintain their own cybersecurity. »
A spokesman for the National Cyber Security Centre said: « The NCSC is aware of incident and working around the clock with the UK Parliamentary digital security team to understand what has happened and advise on the necessary mitigating actions. »
More follows…