Mobile connectivity across the UK is becoming faster and more responsive on average; a marked gap still persists between the quality of experience in urban and rural areas; and the gap between the best and worst-performing local authorities remains significant, according to research from Ookla.

The analyst’s Speedtest Intelligence report for 2025 takes an overview of mobile network performance across the UK, focusing on outcomes at local authority level and how those outcomes have changed over time.

The study was based on millions of samples from mobile devices connected to a cellular network, comparing results from Q1–Q3 2025 with the same period in 2024. For each local authority, the report considered not only typical speeds, but also the experience of slower connections, and the relationship between population density and mobile outcomes. At UK and country (nation) level, it drew on national aggregate metrics (2025 to date) for the UK, England, Scotland, Wales and Northern Ireland.

Fundamentally, the research found that population density correlates strongly with better outcomes, and that practically, the findings illuminate the urban-rural digital divide, showing that where you live in the UK largely dictates your mobile experience.

Analysis of local authority outcomes revealed what Ookla called the “stark” extent of regional variation in and across nations in the UK. Despite the general upward shift in the overall local authority distribution over the past year across key mobile performance indicators, the range remains large and many rural local authority areas are still stuck with not-spots despite the progress of the government’s shared rural network (SRN) scheme. Areas that were strong performers in 2024 generally remained strong, and many of the weakest authorities in 2024 still sit near the bottom of the distribution in 2025.

On a country level, UK mobile performance improved notably between 2024 and 2025, with the national median download speed rising from approximately 55.02Mbps to 63.03Mbps. This represented a year-on-year increase of around 15%. Median upload speeds inched up from 7.80Mbps to 8.21Mbps, while median latency improved marginally from 52ms to 50ms.

England and Northern Ireland saw the strongest gains, while Wales remained the slowest nation and Scotland’s median slipped from 49.13 to 46.05Mbps despite improvements in several local authorities. Overall, though, the UK rates badly compared with European peers such as Germany and the Republic of Ireland.

Drilling deeper, the study showed that the gap between local authorities remained stark. In Q1–Q3 2025, median speeds ranged from just over 10Mbps in the Shetland Islands to just over 100Mbps in Leicester. Around 28% of local authorities had fewer than 60% of test samples meeting a 25Mbps download threshold, indicating persistently poor connectivity for many in the UK.

Including the aforementioned Leicester, top performers included Nottingham, Derby, Bridge of Don, Thurrock and Stoke-on-Trent. These areas typically combine median download speeds in the mid-80s to 100Mbps, roughly three-quarters or more of samples reaching 25Mbps, and relatively strong results even in the slowest 10th percentile (generally around 8–11Mbps).

In addition to the Shetland Islands, the country’s weakest performers included the Isle of Anglesey, Fermanagh and Omagh, Denbighshire, Pembrokeshire, Orkney, and Cornwall. These areas have median download speeds mostly in the mid-teens to low-20s – excluding the Shetland Islands – with less than half of samples reaching 25Mbps and 10th-percentile speeds typically in the 1.5–3Mbps range, highlighting large not-spots for a significant share of users there.

Looking at the companies driving the industry, the study noted that heavy capital spending by the UK’s operators was driving improved outcomes. It added that the UK remains one of only a handful of countries in Europe and globally where at least three operators have “aggressively” deployed 5G standalone across a significant footprint.

Virgin Media O2 has already reported 70% population coverage and BT/EE boasts a similar level. VodafoneThree has committed to invest £11bn in its UK network over the next decade, including £1.3bn of capex in year one.

Source

The UK government has admitted that IT systems at the Foreign, Commonwealth and Development Office (FCDO) were hacked in October, but insists the attack had a “low risk” of personal data being compromised.

During a round of broadcast interviews today (19 December 2025), trade minister Chris Bryant said it was “not clear” who perpetrated the attack, although the first report on the hack, revealed in The Sun, attributed it to a China-based threat actor known as Storm 1849.

The same group was blamed for targeting vulnerabilities in Cisco equipment that led to a National Cyber Security Centre (NCSC) warning in September for organisations using Cisco’s Adaptive Security Appliance family of unified threat management systems. Users were told to replace any devices reaching end-of-life support, noting the significant risks that ageing or obsolete hardware can pose.

Bryant said some of the reports about the FCDO hack were “speculation”, but that the government had managed to “close the hole” quickly, and that security experts were confident there was a “low risk” of any individual being affected. The Sun report claimed hackers accessed confidential data and documents, possibly including thousands of visa details.

The Storm 1849 attack campaign on Cisco equipment was dubbed ArcaneDoor, and targeted two zero-day vulnerabilities. One was a high-severity denial-of-service vulnerability capable of remote code execution; the other was a high-severity persistent local code execution vulnerability.

While government IT systems always face scrutiny over cyber security, the hack will provide further fuel for critics of plans to introduce a national digital ID scheme, many of whom have already raised concerns about the potential risks of gathering citizen identity data.

The development also comes a day after ITV News broadcast a report on the cyber security issues found in One Login – the government single sign-on system that will be at the heart of the digital ID plan – which were first revealed by Computer Weekly in April.

Damaging year

2025 has been a notably damaging year for cyber attacks, with high-profile ransomware campaigns affecting Jaguar Land Rover (JLR), the Co-op and Marks & Spencer.

The Office for National Statistics attributed a November decline in the UK’s economy partly to the impact of the JLR attack, which stopped car production at the manufacturer and had a knock-on impact across the automotive supply chain.

Last month, four London councils – Kensington and Chelsea; Hackney; Westminster; and Hammersmith and Fulham – suffered cyber attacks, disrupting services and prompting an NCSC investigation. Westminster has since admitted that potentially sensitive data was copied from its systems during the hack. Three of the local authorities operate a shared IT service.

Source

Joji/Getty Images

We may receive a commission on purchases made from links.

Choosing the right HDMI cable for your smart TV or peripherals connected to your television should be a straightforward experience. Even though there are several kinds of standard HDMI cables, with the latest being the HDMI 2.2 introduced at CES 2025, you shouldn’t worry too much about them.

After all, unless you have a pretty old device at home, all of your devices should have the same HDMI port. Besides that, there usually isn’t a big difference in price between the various versions, which means you can get the latest technologies without overpaying.

That said, even though the golden advice is to get the latest version of the HDMI cable as possible, it all depends on the technologies available on your TV. You can find this by looking at the manual, or searching for your TV model online. Once you have that figured out, you have a better idea of what cable you should get. Still, here are some other tips before jumping into your Amazon cart and ordering your new HDMI cable.

Newer is better, but maybe you don’t need a lot more

David Becker/Getty Images

Newer HDMI cables are supposed to work with older devices. That means that even if you decide to change your smart TV in the near future, if you get a cable that surpasses the specs of your current TV, you’ll be able to use it with your new one. It’s also important to note that even if your HDMI cable supports 8K120Hz, but your smart TV can only reach 4K240Hz, the cable will respect your TV’s settings — or vice versa.

In addition, not necessarily all the HDMI ports on your TV support the same standard. This means that you might need to choose to plug your PlayStation 5 in the first port, while other peripherals like the Apple TV, Nintendo Switch 2, or even Blu-ray player in slower ports.

Since HDMI 2.2 has just been released, it’s slightly more expensive than the other models, around $20 at Amazon depending on its length. The previous HDMI 2.1 is available for around $14, which will probably make a better investment in the near future, as the new HDMI 2.2 standard depends on both your smart TV but also peripherals, which might take a while.

When are the new smart TVs with HDMI 2.2 support arriving?

With CES 2026 just around the corner, it’s possible that we might start hearing about the first HDMI 2.2 smart TVs soon. This new standard will be able to support 4K at 480Hz, 8K at 240 Hz, and 16K at 60Hz. That said, we might get a preview of improved 4K and 8K TVs arriving later this year with the new standard.

Still, it wouldn’t be a surprise if manufacturers like LG, Samsung, and Sony decide to postpone the announcement of their first HDMI 2.2 support TVs to 2027, as the technology is still fairly recent. It’s also possible that the new standard also comes to business initiatives first, such as AR/VR, big displays at concerts, and so on. One thing is for sure, if you’re currently trying to find an HDMI cable for your smart TV or peripherals, an HDMI 2.1 port will be more than enough for the years to come.

Source

Alex Photo Stock/Shutterstock

If you thought you could escape the “6-7” meme online, you’d better think again, as even Google has joined the phenomenon by incorporating a “6-7” Easter egg right into Google Search, where it often includes such references to notable events. The “Pluribus” Google Search Easter egg is one such example. Reported by 9to5Google, and seen in the following video, the Google Search “6-7” Easter egg can be activated by typing “6-7” or “67” into Google Search. Once that happens, Google Search will perform the hand motion that’s part of the “6-7” meme — the palms-up weighing of the hands — by jiggling the Google Search results up and down. The only thing missing is the sound that goes along with it, as Google Search doesn’t actually say the words “six seven” out loud.

Google’s decision to give “6-7” its own Easter egg isn’t surprising, considering that the viral joke received similar recognition from Dictionary.com in late October, when the meme became the word of the year. Hilariously, Google’s Easter egg is about to prank those people who are still confused about “6-7” after a year of use. They may search for the term, and Google will serve them the Easter egg promptly.

What does 6-7 even mean?

Matt Fowler KC/Shutterstock

Adults asking what “6-7” means, or trying to understand why kids and teens go crazy about the phrase-and-gesture combination, should easily be the second-most popular meme of the year. The confusion of the adult mind trying to discern the meaning of “6-7” in a specific context would need its own Google Search Easter egg. The truth is that “6-7” means nothing in particular. It’s not supposed to indicate that a situation, event, or person is “mid” (so-so), to borrow a term that teens also use. It’s just a vibe that kids understand and convey, a gesture that’s able to generate endless fun for the younger generations.

Dictionary.com put it best, saying that “the most defining feature of 67 is that it’s impossible to define. It’s meaningless, ubiquitous, and nonsensical.” The website also explained the source of the meme, which may be useful to have on hand especially during the busy holiday season when families get together and there may be plenty of “6-7” going around: “The origin of this most modern use of 67 is thought to be a song called ‘Doot Doot (6 7)’ by Skrilla. (This is an opportune moment to mention that you may also see it written as 6 7, 6-7, or six-seven, but the most important thing is to never pronounce it as ‘sixty-seven.’) It was quickly reinforced by viral TikToks featuring basketball players and a young boy who will forevermore be known as the ’67 Kid.'”

The “Doot Doot (6 7)” and the “67 Kid” videos, seen above, should help clarify the meme.

Source

Artificial intelligence (AI)-powered autonomous vehicle technology provider Kodiak AI has turned to Verizon Business to bring connectivity and internet of things (IoT) data capabilities to its driverless trucking services.

Founded in 2018, Kodiak AI offers AI-powered autonomous vehicle technology designed to help address the problem of safely transporting goods in the face of unprecedented supply chain challenges and tackle some of the toughest driving jobs.

The company serves customers in long-haul trucking, industrial trucking and defence industries, and its stated vision is to become the trusted world leader in autonomous ground transportation. Kodiak AI says it’s committed to a safer and more efficient future for all through the commercialisation of driverless trucking at scale. In 2024, it believes it achieved a historic milestone by becoming the first company to deploy customer-owned and operated driverless trucks in commercial service.

To that end, Kodiak has developed the Kodiak Driver, a virtual driver that combines advanced AI-powered software with modular and vehicle-agnostic hardware to further address customers’ needs.

Kodiak Driver incorporates technology that allows a human to provide remote assistance to a vehicle in certain low-speed and clearly defined scenarios that benefit from human involvement. Verizon connectivity allows Kodiak’s driverless vehicles to communicate with Assisted Autonomy drivers and send mission-critical communication between vehicles and command centres, with low latency over long distances in remote environments.

The collaboration uses Verizon’s 5G and LTE networks, IoT telematics and ThingSpace management platform to help fill Kodiak’s need for advanced data capabilities. Use cases include over-the-air software updates, remote fleet management, and skilled remote assistance for Kodiak’s long-haul trucking and industrial operations.

Verizon provides custom 5G and LTE data plans for the intense data demands of autonomous vehicle operations. The network delivers high-bandwidth, low-latency connectivity for the required over-the-air software updates, and near-real-time communication between operations centres and trucks throughout the US.

The connectivity is critical for Kodiak’s Assisted Autonomy capability. Enabled by Verizon partner and automotive-grade remote driving technology provider Vay Technology, this allows remote operators to quickly review camera feeds and sensor data, and guide autonomous trucks through defined scenarios. This human oversight is intended to enhance safety and helps make daily operations more efficient.

The ThingSpace centralised IoT platform allows Kodiak’s IT team to easily monitor, manage and troubleshoot connectivity across the fleet. The platform tracks data usage and provides cost transparency, enabling efficient scaling of operations.

“Our autonomous driver as a service business model requires highly reliable, low-latency communications for a number of different data transport and management needs,” said Don Burnette, founder and CEO of Kodiak AI. “This is physical AI at work to enable up to 24/7 driverless operations, and Verizon’s cellular and IoT capabilities provide the backbone that helps Kodiak safely scale its business and deliver for our customers.”

With the network foundation, Verizon says Kodiak can deliver next-generation driverless services to its customers, including day-and-night hauling for industrial clients and long-haul freight with trucking partners.

“Kodiak’s cutting-edge approach to logistics showcases the vast potential of the future of transportation powered by AI and connectivity,” added Daniel Lawson, senior vice-president of global solutions at Verizon Business.

“Our IoT solutions, 5G network and data platforms are now underpinning connected-vehicle operations of every size and scale. And now with AI catalysing new enthusiasm for autonomous mobility, reliable connectivity and data services have never been more important.”

Source

After decades of research and experimentation, quantum is shifting from discovery to deployment, and the coming year will be critical for stepping up delivery on a world‑class quantum network by 2035, according to a research note by BT.

Furthermore, said Gabriela Styf Sjoman, the firm’s managing director of research and network strategy, the UK’s next phase of quantum progress hinges on building quantum-ready and quantum-secure networks.

The mission to build a world‑class quantum network by 2035 would provide the secure infrastructure needed to connect quantum technologies and enable real‑world applications.

As BT was publishing the paper, UK Research and Innovation was mapping out its £38.6bn budget of which £1bn has been committed to quantum over the 2026–30 time period.

BT says global momentum for quantum technologies is building fast. Quantum computers are emerging, investment is rising, and early applications are said to be showing real value. Quantum is no longer a distant frontier, it stated: it is becoming one of the defining technologies of the next decade – and the UK has a pivotal opportunity to lead.

BT believes progress across quantum missions in 2026 will be essential to achieving the UK’s ambition to secure 15% of the global quantum technologies market and 15% of global private equity investment by 2033.

However, the company added that such technologies will require top infrastructure to function effectively. “As exciting and extraordinary as quantum computers, sensors and devices are – on their own, they are isolated,” said Styf Sjoman. “Their true value is unlocked only when they are connected – to each other, to users, to data, and to the wider digital ecosystem. Just as AI required cloud infrastructure and electric vehicles needed charging networks, quantum technologies need networks that are both quantum-secure and quantum-ready. This is the foundation of the UK’s future quantum economy.”

BT sees its role as delivering quantum-secure and quantum-ready networks, and believes that in its role as the UK’s leading network provider, it was uniquely placed to build this infrastructure.

The paper revealed that BT was developing quantum‑secure networks using technologies such as PQC, Quantum Key Distribution (QKD) and entanglement‑based security, ensuring data is protected today and resilient against future threats.

Quantum‑ready networks will connect quantum computers, sensors and devices, and are designed to enable the quantum internet and unlock applications yet to exist.

To this end, in 2025, BT began building with the University of Suffolk a research facility designed for optical space‑to‑ground communications which it says is essential for future satellite‑enabled quantum networks. It has also developed IP in quantum sensing and trialled a quantum radio receiver.

UKRI has selected BT to lead Project Spectra, looking to advance quantum‑enabled RF sensing and strengthen the UK’s sovereign capability with global impact.

“Making quantum technologies is as critical as enabling, adopting and implementing them – and essential for UK leadership,” said Styf Sjoman. “The UK enters 2026 from a position of strength, with thriving startups, strong industrial players and world-class research.

“Now we need to accelerate adoption, and build deeper, more resilient supply chains. Government has a key role to play: stimulating demand, convening industry and users, and helping to turn breakthrough science into deployable solutions.”

Source

DenPhotos/Shutterstock

Having the opportunity to upgrade a device is pretty exciting — especially when you’re cracking the cellophane on a new Apple product. Getting ahold of something like the Apple Watch Series 11 can be a fun experience, but then the challenge of finding a use for your old device arises. You can properly recycle or sell it, of course, but it’s worth knowing that there’s some other options available.

Taking a look at the list below, your old Apple Watch can be fantastic for a grandparent, help you sleep at night, act as a backup for certain activities, or even be transformed into a retro-looking Apple product. Most of these ideas will simply require having the Apple Watch, but at least one idea does involve purchasing an extra accessory. We also did our best to let you know when certain ideas may require additional research regarding the specific model of your Apple Watch.

From Apple Watch features that might fly under people’s radars, to watchOS 26 providing plenty of reasons to upgrade, getting a new one certainly isn’t a bad decision — but there’s still plenty of experiences to be had with your old one. Check out the ideas below to see if any of them can spark a bit of creativity for your old device, as an Apple Watch wasting away in a sock drawer somewhere isn’t ideal.

Make your old Apple Watch into a dedicated sleep tracker

Samio20/Shutterstock

Using an iPhone, iPad, or Apple Watch to track your sleep is pretty easy to set up, and if you have an older version of a Watch, using it solely to track your sleep, and act as a secondary alarm, can be a great way to get some extra use out of it. So long as the device supports watchOS 8 or later, you can use your old Apple Watch to track your sleep, allowing your new device to charge or rest alongside you.

An Apple Watch is capable of tracking how long you spend within each stage of sleep, including REM, Core, and Deep sleep (if you’re using watchOS 9), and it can also determine if you’re waking up in the middle of the night. Getting started is as simple as navigating to the Sleep app from your Apple Watch and following the instructions.

Once you dive fully into the Apple Watch’s sleep monitoring functions, you’ll be able to set a sleep goal, limit notification distractions with Sleep Focus, and more. You can easily view your metrics within the Sleep app, or you can also view them through the Health app on your iPhone by opening the app, tapping the magnifying glass icon, and selecting Sleep. Lastly, you can also set alarms from your old Apple Watch, and it can simply buzz to wake you when you activate Silent Mode from Control Center — which may be ideal for a partner that’s still trying to get some shut-eye.

Turn your old Apple Watch into a modern iPod

A solid protective case can be a wise investment, but one that provides cool secondary functions can offer so much more. For the iPhone, there’s the GameBaby case that also serves as a retro gaming controller. For the Apple Watch, the RePod C1 from Beaverlab is a $49.90 accessory that gives it the style and functionality of a classic iPod while retaining everything great about your old smartwatch.

The RePod C1 supports a wide-variety of Apple Watch models, including the Apple Watch Series 4 through 9, and the SE first, second, and third generation — so long as they’re 44mm or 45mm in size. The body of the RePod not only features that classic iPod look (with controllable click wheel), but also acts as a protective case. What’s even cooler is that the case supports any features that the Apple Watch does, meaning you can use Apple Pay, or transfer music to your Watch and use it as an MP3 player.

For those that like options, there’s also the tinyPod for $79, which supports 41/40mm, 45/44mm, and 49mm models. They also offer a soft case that has no scroll wheel for $29, which can be good for anyone that just wants the look but can do without the wheel functionality. For anyone that misses their old iPod and has an Apple Watch laying around, this can be a great way to bring new life to your old smart wearable.

Use your old Apple Watch for extreme activities

LittlePigPower/Shutterstock

Having a new Apple Watch is great, but there may be some activities or adventures where taking your new device can be risky — and you just can’t swing the $800 price tag of the Apple Watch Ultra. While other models of the Apple Watch can handle a variety of activities — the product lineup offers some of the best fitness apps, after all — if you know you’re going to be doing something that can put your Watch in jeopardy, maybe bringing an older model along is a wise decision.

There’s more than a few situations where doing so may come in handy. For example, when it comes to an Apple Watch and it being water-resistant, there’s more than a couple of things you should know, so taking an older device to the pool can be a great way to ensure your new one stays safe. Since an Apple Watch can track a ton of different workouts – including Functional Strength Training, Indoor/Outdoor Running and Walking, Surfing, and more –- you can use the older Watch for tracking activities while keeping your new Watch pristine.

For those that love closing their Activity Rings every day, so long as both Watches are still connected to your iPhone, you’ll be able to close your Rings on one Watch without worrying about closing them on the other, as the data is sent to your iPhone. So if you know you have a big day of rock climbing or jetskiing ahead of you, leaving your new Apple Watch at home and taking your old one may be the smart move.

Give your old Apple Watch to a grandparent

Ringo Chiu/Shutterstock

There’s plenty of reasons to get an Apple Watch yourself; between hidden features you should use everyday to some of the most essential apps you need to install, there’s a lot to like about the product. Something really nice about these devices, however, is that they also have a rather impressive amount of health features that can be beneficial for loved ones who happen to be older.

For starters, there’s more than one story out there about Apple Watch’s Fall Detection features saving someone’s life, and in January 2025, the SOS Alert feature saved a skier after a 1,000 foot fall. These standout examples come in addition to other health tracking features provided by the Apple Watch, including Sleep Tracking, a heart rate monitor, and more. You’ll need to do some research for the specific features your Watch has, but there’s a good chance you’ll find something useful for the senior in your life.

While things are easier if the grandparent in question has their own iPhone to connect with the Apple Watch, there’s still some options if they don’t. So long as you have an iPhone, you can set the Apple Watch up for a relative with Apple Watch For Your Kids, meaning they can use many of the Apple Watch’s features without the need for their own iPhone. However, they will miss out on some big health features by employing this method, such as Blood Oxygen and Sleep tracking, so having their own iPhone is more ideal. The Watch will still have heart rate notifications and Fall Detection, however, so it can still make a great accessory for an older individual.

Source

Erstudiostok/Getty Images

We use so many tech devices day to day — from smartphones to computers, earbuds to smartwatches — that recharging our devices has become routine. You may have a rat’s nest of cables on your desk to recharge everything you need to get through the day. Logically, that makes wireless charging as an alternative sound quite appealing. You can plug in a single multi-charge unit, or a wireless charging pad, and get all your devices boosted in a neat and tidy way. It sounds like a no-brainer.

But wireless charging isn’t for everyone. For powers users, especially, you might find that it simply doesn’t suffice. Even the fastest wireless charging standards, with limited exceptions, are generally slower than basic wired charging options. What’s more, they require a cable anyway (to the base), typically cost more, and have limited compatibility. Plus, you can’t comfortably use your phone for anything but passive tasks — like watching videos or making calls — while it’s charging, even if it’s on a charging stand. Wireless charging is useful for quick top-ups, but for reliable, primary charging, wired is still the way to go.

Wireless charging is typically slower than wired charging

Lee Charlie/Shutterstock

No matter how you slice it, wireless charging is slower. The maximum wireless charging speed is 25W through the new Qi2 standard, based on Apple’s MagSafe technology, although proprietary wireless chargers for OnePlus and Xiaomi currently best this standard. But 25W Qi2 accessories are only just starting to arrive. Further, so far the only phones that can support 25W Qi2 wireless charging are the Google Pixel 10 Pro XL and iPhone 17 series devices (iPhone Air at 20W). What’s more, all Android phones to date with the exception of the Pixel 10 series require a MagSafe case to work with Qi or Qi2 charging. That is, if they are even Qi2-ready, like the Samsung Galaxy S25 series. Those phones support the standard but don’t have the positioning magnets built into the back.

Most Qi2 wireless charging-enabled mobile devices support up to 15W wireless charging, while older Qi-enabled devices tap out at 7.5W. To put this in perspective, a MagSafe charger can get an iPhone 17 to about half battery life in 30 minutes, provided a newly released 30W MagSafe puck is present. With slower or older wireless chargers, the pace of charge is very sluggish by comparison. 

Wired charging speeds are on the rise

Hsyncoban/Getty Images

Aside from certain outliers, wired charging will almost always be faster. The iPhone 17 series models, for example, support 40W charging, which can get you to 50% in about 20 minutes. The time savings can add up.

Consider that many phones also support super-fast charging with the right cables and adapters. Some brands, like OnePlus, even include ultra-fast adapters in the box. The new OnePlus 15, for example, supports 80W SUPERVOOC wired charging (100W internationally).

But it’s also worth noting that wireless chargers often produce more heat. Over time, if you rely exclusively or predominantly on fast wireless charging, which uses higher charging currents, this can potentially degrade the battery faster. In a pinch, you can always rely on a wired cable and adapter, or a power bank, while wireless charging is useful for emergency top-ups. A lower-output wireless charger may also be suitable for all-day at-your-desk charging when you aren’t in a rush.

Source

Westminster City Council has said that “potentially sensitive and personal” data was stolen by hackers during the cyber attack that hit three neighbouring London authorities last month.

Westminster is part of a shared IT services operation with the London Borough of Hammersmith and Fulham, and the Royal Borough of Kensington and Chelsea (RBKC), with all three affected by the attack, which was first detected on 24 November.

RBKC said four days later that it had experienced a data breach during the attack, but Westminster has now confirmed that, following further examination, its data was copied and taken by a third party that infiltrated IT systems operated by RBKC.

“The council has established that the Westminster breach involves some limited data, hosted in the Royal Borough of Kensington and Chelsea’s shared IT environment, which is likely to contain some potentially sensitive and personal information,” said Westminster council in a statement published on its website.

“Work is underway to establish what exactly the data entails and how it relates to individuals, as part of a comprehensive process in line with the Information Commissioner’s Office recommendations, which will take some time to complete. The data is not lost or deleted, and there is no indication at this stage that it has been published online.”

RBKC added in a separate statement: “Following extensive investigation with cyber security specialists from NCC Group and independent forensic experts, we can confirm that this was a cyber attack with criminal intent, with data copied and taken away.”

The councils said the attack was detected quickly and they believe it was stopped before it could spread to other systems. “There is no evidence of any lateral movement,” said RBKC.

The Metropolitan Police, the National Crime Agency, and the National Cyber Security Centre are also involved in the investigation.

Westminster councillor David Boothroyd, cabinet member for finance and council reform, reassured residents that the council is doing everything possible to respond to the incident and to keep delivering services.

“Our priority is to support and protect the most vulnerable in our community, despite the disruption that is being caused. We acted quickly to secure our systems, and we are working towards restoring council services as safely and swiftly as possible, but this will take time. We remain committed to transparency and will continue to provide updates as our recovery progresses,” he said.

RBKC said it will “take months” to fully check for any further data exfiltrated from its systems. The borough said it has written to more than 100,000 households with advice on what to do if they are worried about the data breach.

“We’re working to restore all systems securely, but this will take time. Essential services, including those supporting vulnerable residents, are being prioritised,” said RBKC. “Our investigation is ongoing and will take several months, due to the complex nature of the attack and the data involved, and the need to restart many of our systems.”

Public services were affected at all three councils affected. In Hammersmith and Fulham, multiple services were affected, with most of its online offerings unavailable, including council tax accounts; business rates payments; benefits accounts; housing, including repairs; parking permits, fines and on-street bay suspensions; freedom pass applications; and property licensing.

In Westminster, the disruption also extended across multiple services, including rent and service charge payments; council tax and business rates; housing repairs; local support payment applications; community hall bookings; birth, death and marriage certificates; children’s services referrals; complaints; licensing; and online waste and recycling services, including bulky item collections and requests for more recycling bags.

The UK government also admitted today that IT systems at the Foreign, Commonwealth and Development Office were hacked in October, but insisted the attack had a “low risk” of personal data being compromised.

Source

The European Commission has renewed its data adequacy agreement with the UK, guaranteeing free flow of data with the European Union (EU) for a further six years.

The agreement assures that the UK’s data protection framework is considered to have equivalent safeguards to the EU, based on two European regulations – the General Data Protection Regulation (GDPR) and the Law Enforcement Directive (LED). The existing adequacy arrangement was due to expire on 27 December but will now continue until the same date in 2031.

Minister for digital government and data Ian Murray said in a post on X (formerly Twitter) that he was “thrilled” at the decision.

“I’m thrilled to welcome the EU’s renewal of its two adequacy decisions for the UK. We remain committed to enabling secure, trusted data flows between the UK and EU to support growth, innovation and security,” he wrote.

Henna Virkkunen, executive vice-president for tech sovereignty, security and democracy at the European Commission, said the renewal of data adequacy benefits businesses and citizens on both sides of the Channel.

“It ensures the free flow of personal data between the European Economic Area and the UK in full compliance with data protection rules while reducing costs and administrative burdens. This continuity allows European companies to keep sharing data seamlessly with their UK partners, supporting innovation, competitiveness and trusted digital cooperation.”

Data adequacy with the EU became a critical issue after the UK left the bloc, and the original 2021 agreement was based on the measures introduced by the Data Protection Act 2018 (DPA).

In June this year, the government amended parts of the UK’s data protection regime through the Data (Use and Access) Act, which aimed to make it easier for businesses and the public sector to share data, which the government claimed would ease bureaucracy and improve efficiency.

Several civil society groups wrote in June to Michael McGrath, European commissioner for democracy, justice, the rule of law and consumer protection, calling for the EU to rescind the UK’s data adequacy status, citing major concerns around the erosion of privacy and data rights and warning of “a substantive risk” that fresh UK adequacy decisions could be struck down by the European Court of Justice.

“Allowing third countries such as the UK to benefit from unrestricted personal data flows with the EU while simultaneously weakening legal safeguards at home does not only endanger the rights of people in the EU, it also undermines the credibility of the EU’s data protection framework, exposes EU businesses to unfair competition, and devalues the Union’s regulatory leadership on the global stage,” they wrote.

“The UK government’s proposed reforms and recent actions threaten to imperil the UK’s data and privacy protections. This status of affairs will fuel uncertainty and threaten individuals and businesses alike.”

There were also warnings in Parliament that police use of US-based hyperscale cloud providers for processing sensitive law enforcement data could put adequacy with the Law Enforcement Directive at risk.

In June 2024, Computer Weekly revealed that UK policing data uploaded to Microsoft cloud services is routinely sent offshore for some forms of processing, in an apparent breach of the LED.

During a debate in the House of Lords in March, Liberal Democrat peer Tim Clement-Jones highlighted how cloud service providers routinely processed data outside the UK, and were unable to provide contractual guarantees to policing bodies as required by Part Three of the DPA, which implements measures in the LED: “As a result, their use for law enforcement data processing is, on the face of it, not lawful,” he said.

To circumvent the lack of compliance with these transfer requirements, the government simply dropped them from the new data act.

“The government’s attempts to change the law highlight the issue and suggest that past processing on cloud service providers has not been in conformity with the UK GDPR and the DPA,” said Clement-Jones, at the time.

Commenting on the renewal of data adequacy, European commissioner McGrath said, “The UK is an important strategic partner for the European Union and the adequacy decisions form a central pillar of this partnership.

“By enabling the free flow of personal data, they underpin both commercial exchanges and cooperation in the fields of justice and law enforcement. Their renewal reflects the Commission’s assessment that the UK’s legal framework continues to provide robust safeguards for personal data that remain closely aligned with EU standards, including in the context of recent legislative developments.”

Source