The electoral registers held by the Electoral Commission at the time of the cyber attack include the name and address of anyone in the UK who was registered to vote between 2014 and 2022, as well as the names of those registered as overseas voters.
The registers did not include the details of anonymous voters, who are not named on the electoral register due to personal safety concerns.
No council-held data was compromised. Registered voters in Lambeth should have confidence that this cyber attack had no impact on Lambeth Council systems and we will continue to keep everyone’s data safe.
The attack has not affected your right to vote or whether you are registered to vote. Council services remain unaffected.
The Information Commissioner is currently investigating what happened.
Further information and FAQs are available on the Electoral Commission’s website at: https://www.electoralcommission.org.uk/privacy-policy/public-notification-cyber-attack-electoral-commission-systems
If you have concerns over any personal data the Electoral Commission may hold about you, please contact the Electoral Commission’s Data Protection Officer via email: dataprotection@electoralcommission.org.uk or in writing to:
Andrew Simpson
Head of Digital, Data,Technology and Facilities
The Electoral Commission
3 Bunhill Row
London EC1Y 8YZ
To find our more read the statement from the Information Commissioner:
