Cyber security incident at Royal Armouries

What has happened?

On Tuesday 11 January the Royal Armouries began experiencing disruption to its IT systems.

On Wednesday 12 January a cyber security incident was confirmed to be in progress. Investigations began and immediate measures were taken to secure the system and prevent any further impact. This has caused some disruption to internal IT processes.

During investigations, the potential for some limited personal data breaches has been identified. This was reported to the Information Commissioner’s Office on Friday 14 January in line with regulations and communications have begun with potentially affected parties.

As yet no personal data breaches relating to visitors have been identified. As the investigation progresses, any further affected parties will be communicated with by Royal Armouries.

What is being done to address the situation?

The Royal Armouries is now going through a stringent process of decontamination, and is taking a prudent approach to ensure the security of its IT systems going forward. As the priority is to be diligent, ongoing disruption to IT systems is expected for some time.

All sites remain open, and the website and social media channels are unaffected.

Throughout this situation, the Royal Armouries is working in conjunction with the National Cyber Security Centre and liaising with the Information Commissioner’s Office. The Department for Digital, Culture, Media & Sport is being kept informed.

Further enquiries to: communications@armouries.org.uk