Glasgow City Council services begin to be restored following cyber attack

Glasgow City Council has said that some services are beginning to be restored following a cyber attack over a week ago.

The local authority was alerted to malicious activity on servers managed by a third-party supplier on June 19

A number of affected servers were taken offline, leaving several services unavailable, including planning applications, paying parking or bus lane fines, and ordering certificates.

Household schedules for bin collections, permits, and complaints have also been impacted.

The council issued a warning on Friday relating to scam text messages, directing recipients to pay outstanding parking fines online.

The suspicious messages, while not mentioning Glasgow or any other location, have been received by at least some people in the city and elsewhere in the city region.

Glasgow & West

Council issues warning over parking fine scam amid ongoing cyber attack

Glasgow City Council said it is aware of what appear to be scam text messages, directing recipients to pay outstanding parking fines online.

The council said it had restored the first of two services on Tuesday – Strathclyde Pension Fund, which supports pensions, and public Freedom of Information requests.

It was previously confirmed that no financial systems have been affected, and no details of bank accounts or credit/debit cards processed by those systems have been compromised.

The council said that joint investigations with Police Scotland, the Scottish Cyber Coordination Centre (SC3), and the National Cyber Security Centre have not found any evidence of any stolen data, as cybersecurity investigations continue.

Security specialists previously confirmed that the incident was not caused by email, and that email communication with the council remains safe.

North Lanarkshire Council and East Dunbartonshire Council are also both impacted by the cyber incident, as they both use Glasgow City Council’s payment portal for parking fines and appeals.

A Glasgow City Council spokesperson said: “Early in the morning of Thursday, June 19, 2025, our ICT supplier CGI discovered malicious activity on servers managed by a third-party supplier.

“We acted quickly to isolate these servers, protecting our wider network – but taking them offline has disrupted a number of our day-to-day digital and online services.

“We are conducting an investigation into the incident, alongside Police Scotland, the Scottish Cyber Coordination Centre (SC3) and the National Cyber Security Centre.

“In parallel, we are working to recover the services that have been taken offline on new servers, when it is safe to do so.

“The first two services to be restored, which support pensions and public Freedom of Information requests, came back online today.

“We are sorry that this incident will have caused real anxiety to people who have used our online services – and frustration for those unable to access those services now.”