British Library says final cost of cyber attack is ‘not confirmed’
The institution announced in October that a ‘major technology outage’ had taken place.
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.The British Library has said the final cost of recovery from a recent cyber attack is “still not confirmed”.
The Financial Times reported the library will use about 40% of its reserves after the attack, which was announced in October as a “major technology outage”.
According to the FT, a source said the library will be forced to spend what could equate to £6 million to £7 million – out of £16.4 million in unallocated reserves – to rebuild most of its digital services.
The library always maintains its own financial reserve to help address unexpected issues and no bids for additional funding have been made at this stage
The library outside St Pancras International station, which has one of the largest book collections in the world, said it has its own financial reserves and has not applied for extra funding.
A spokesperson said: “The final costs of recovering from the recent cyber attack are still not confirmed.
“The British Library and its Government sponsor, the Department for Culture, Media and Sport (DCMS), remain in close and regular contact.
“The library always maintains its own financial reserve to help address unexpected issues and no bids for additional funding have been made at this stage.”
In October the institution announced that the National Cyber Security Centre (NCSC) and cybersecurity specialists would investigate the attack.
The next month it was revealed that the attack had led to a leak of employee data.
The Rhysida ransomware group claimed it had access to passports along with other data files.
In a post to X at the time, the institution said: “We’re continuing to experience a major technology outage as a result of a cyber-attack. This is affecting our website, online systems and services, as well as some onsite services too.
“Following confirmation last week that this was a ransomware attack, we now have evidence that indicates the attackers might have copied some user data, and additional data appears to have been published on the dark web.
“We will continue to work with cybersecurity specialists to examine what this material is and we will be contacting our users to advise them of the practical steps they may need to take.”
The library is collaborating with the Metropolitan Police and says analysing data from the breach is likely to take several months.
The attack is still affecting the library’s online systems and services but its physical sites are open.
A reference-only version of its main catalogue will be back online from January 15.
The DCMS declined to comment.