Supply chain ⛓ Supply Chain

Glasgow City Council Third-Party Breach (June 2025)

📅 2025-06-01 🏢 Third-party vendor
Primary Source ↗

Incident Details

Glasgow City Council impacted by ‘cyber incident’. The Glasgow City Council announced that it was affected by an incident “disrupting a number of online services and which may have involved the theft of customer data.”. Glasgow City Council announced on Wednesday being impacted by a cyber incident which it said was “disrupting a number of online services and which may have involved the theft of customer data.”. The nature of the incident hasn’t been confirmed. It was uncovered by the council’s IT supplier CGI last week, “on servers managed by a third-party supplier,” according to the council’s statement.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Third-party vendor
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2025-06-01 Breach occurred
  2. 2025-06-25 Publicly disclosed