The U.K. Electoral Commission on Tuesday disclosed a “complex” cyber attack on its systems that went undetected for over a year, allowing the threat actors to access years worth of voter data belonging to 40 million people.
“The incident was identified in October 2022 after suspicious activity was detected on our systems,” the regulator said. “It became clear that hostile actors had first accessed the systems in August 2021.”
The intrusion enabled unauthorized access to the Commission’s servers hosting email, control systems, and copies of the electoral registers it maintains for research purposes. The identity of the intruders are presently unknown.
