Gibraltar says cyberattack on its cloud is contained but does not yet know if information was stolen

The Government of Gibraltar confirmed in a statement on Monday that it has contained a cyber security incident involving unauthorised access to part of its cloud environment, which includes Outlook, Teams, SharePoint and OneDrive, according to the Gibraltar Chronicle. The incident began several weeks ago and the Information Technology and Logistics Department (ITLD) acted after Microsoft alerted it to a potential data breach.

The investigation remains open to establish whether information was viewed or extracted without authorisation, according to the same outlet. The government says the main databases holding residents' personal records are kept separately in its own data centre, but that the affected cloud holds official email and documents. If the investigation finds personal data was affected, it will notify the people concerned directly, according to the statement as reported by the Chronicle.

The UK's National Cyber Security Centre coordinated specialist support and experts from its partner organisations arrived in Gibraltar on November 2, according to the Chronicle. The government suspended some services on November 6 for forensic work and new security measures, and says it is still detecting attempts to access cloud accounts, which it is blocking.

The Gibraltar Chronicle says there is no confirmation of who carried out the attack.