SEPA Cyber-Attack: Update

  07 January 2021
On Christmas Eve, the Scottish Environment Protection Agency (SEPA) confirmed that it was responding to a significant cyber attack involving complex and sophisticated criminality.  We confirmed the attack was affecting our contact centre, internal systems, processes and internal communications.

The above is subject to a live criminal investigation and the duty of confidence is embedded in law. 

We moved quickly to enact our business continuity arrangements and our core regulatory, monitoring, flood forecasting and warning services are adapting and continuing to operate.

Whilst continuing to work with Scottish Government, Police Scotland and the National Cyber Security Centre, including across the festive period, the attack remains ongoing and communication into and across the organisation remains significantly impacted.

Our approach is to take the best professional advice from the multi-agency partners, including Police Scotland, to support our response.  For the time being, we need to protect a criminal investigation and our systems.  Some of our internal systems and external data products will therefore remain offline in the short term.

We’re working hard on analysing the impact before moving to eradicate, remediate and recover and our priorities are focused on incident response, supporting our staff, our priority services and the important work we continue to do in protecting Scotland’s environment and communities.

Where able to do so, we’ll provide further updates as quickly as possible at www.sepa.org.uk/cyberattack as more information becomes available.

Whilst we work hard to understand and resolve the issues:

  • The public can:
  • Visit SEPA's website here
  • Check latest flooding information here.
  • Call SEPA's 24 Hour Floodline on 0345 988 1188.
  • Report pollution or environmental incidents here.
  • Call SEPA's 24 Hour Pollution Hotline on 0800 80 70 60. 
  • Find the latest information on how we’re responding to the cyber attack at www.sepa.org.uk/cyberattack
  • For other enquiries, contact us here, noting there may be a delay in responding.
  • Regulated businesses can:
  • Visit SEPA's website here.
  • Check the latest EU Exit & Coronavirus Regulatory Approach information here.
  • Report pollution or environmental incidents here.
  • Call SEPA's 24 Hour Pollution Hotline on 0800 80 70 60. 
  • Find the latest information on how we’re responding to the cyber attack at www.sepa.org.uk/cyberattack
  • For other enquiries, contact us here, noting there may be a delay in responding.
  • Suppliers can:
  • Find the latest information on how we’re responding to the cyber attack at www.sepa.org.uk/cyberattack
  • Contact us here, noting there may be a delay in responding.
  • For all other enquiries:
  • Contact us here, noting there may be a delay in responding.