Supply chain
⛓ Supply Chain
Glasgow City Council Third-Party Breach (June 2025)
Primary Source ↗Incident Details
Glasgow City Council impacted by ‘cyber incident’. The Glasgow City Council announced that it was affected by an incident “disrupting a number of online services and which may have involved the theft of customer data.”. Glasgow City Council announced on Wednesday being impacted by a cyber incident which it said was “disrupting a number of online services and which may have involved the theft of customer data.”. The nature of the incident hasn’t been confirmed. It was uncovered by the council’s IT supplier CGI last week, “on servers managed by a third-party supplier,” according to the council’s statement.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Third-party vendor
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2025-06-01 Breach occurred
- 2025-06-25 Publicly disclosed