Brute force attack on the Scottish Parliament

The Scottish Parliament Chief executive Sir Paul Grice said the attack from “external sources”, was similar to that which affected Westminster in June.

He confirmed the attack in a message to MSPs and staff with parliamentary email addresses, urging them to be vigilant.

Mr Grice said “robust cyber security measures” identified the attack early, and systems “remain fully operational”.

Scottish NHS boards were also affected by a cyber-attack in May, leading to several discussions of cyber security at Holyrood…

…A “brute force” attack involves hackers repeatedly trying to access systems using a range of different passwords, in the hope of effectively guessing the correct password through trial and error.

Mr Grice’s email urged MSPs and staff to make sure their passwords were as secure as possible, saying that the parliament IT team would “force a change to weak passwords as an additional security measure”.

He wrote: “The parliament’s monitoring systems have identified that we are currently the subject of a brute force cyber attack from external sources.”

“This attack appears to be targeting parliamentary IT accounts in a similar way to that which affected the Westminster parliament in June. Symptoms of the attack include account lockouts or failed logins.”

“The parliament’s robust cyber security measures identified this attack at an early stage and the additional security measures which we have in readiness for such situations have already been invoked. Our IT systems remain fully operational.”

Read more at:  ‘Scottish Parliament targeted in ‘brute force’ cyber attack‘