FOI Request - Cyber Attack Incidents and Costs

Request 101003774236

1. How much money has the council spent on the prevention of cyber attacks/e-crimes, including wider digital and physical security spending, in 2021, 2022, 2023, 2024 and 2025 to date?

2. How much money has been “lost” in terms of data storage/fines in each of those years

3. How many "attacks" has the council been aware of against it, in each of those years

4. How much money has been spent specifically on firewalls, locked down desktops/servers, intrusion prevention systems, and end-point-security software, in each of those years.

Response 19-05-2025

1. Not held. There is no specific budget for the prevention of cyber-attacks / e-crimes. There are elements of expenditure across a number of different categories in the financial management system e.g. software, hardware, and external services. Information that is not held falls under Section 17 of the Freedom of Information (Scotland) Act 2002 - Information not held.

2. Nil

3. 

2021/22            1             
2022/23            0             
2023/24            1             
2024/25            0
2025/26            0

4. 

2021/22             Not held. Information only available for three years on financial management system. Information that is not held falls under Section 17 of the Freedom of Information (Scotland) Act 2002 - Information not held.  

2022/23                Not held. Information only available for three years on financial management system. Information that is not held falls under Section 17 of the Freedom of Information (Scotland) Act 2002 - Information not held.  

2023/24            £160k
2024/25            £55k
2025/26            Nil to date