Cyberattack on UK parliament email accounts forces security team to disable remote access; investigation is ongoing
House of Commons spokesperson says it is investigating after unauthorised attempts were made to access user accounts — Parliament has been hit by a “sustained and determined” …
Context & Ripple Effects
In June 2017, the House of Commons confirmed a sustained and determined attack on the parliament email system in which unauthorised attempts were made against user accounts, prompting the security team to disable remote access while fewer than 1% of the 9,000 accounts on the system were compromised. The incident sits at the start of a longer arc of state-linked intrusion into UK institutions: by October, British intelligence had attributed the June attack to Iran, and the years since brought the Guardian's own December 2022 ransomware breach and a multi-year hack of the Electoral Commission by hostile actors.
First-order effects
- MPs and Commons staff immediately lose remote access to parliamentary email while the House of Commons runs its investigation into the unauthorised access attempts.
Second-order effects
- The compromise of even a small share of accounts forces a hardening of parliament's authentication and remote-working posture, the kind of access-control tightening that later coverage shows extending across UK government bodies.
Third-order effects
- With the June attack later attributed to Iran and a Foreign Office breach attributed to China, the pattern points toward hostile-state targeting of UK institutions as routine — a trajectory a parliamentary report crystallised by warning the UK is exposed to a catastrophic ransomware attack at any moment absent government action.
The trend: Hostile-state cyber operations against UK government institutions are shifting from isolated email intrusions toward a sustained, systemic threat that outpaces the government's defences.