Middlesbrough Council experienced two successful DDoS attacks in late 2024 (November and early December), which took down its official website, disrupting public access to online services. While the council implemented a mitigation solution by the end of 2024—preventing further incidents—the attacks exposed vulnerabilities in its digital infrastructure. The council had already been proactively overhauling its cybersecurity strategy, including staff training, disaster recovery tests for data centers, and third-party risk assessments through the Get Cyber Assessment Framework (CAF), which secured a £15,000 government grant. Additionally, an audit by Veritau confirmed 'Substantial Assurance' in its controls, though the DDoS incidents highlighted persistent risks. The attacks did not result in data breaches, financial theft, or long-term operational halts, but they undermined public trust and required immediate technical intervention. The council’s broader cybersecurity investments (e.g., £25,000 for a 12-month service) reflect the escalating threat landscape faced by UK public sector entities, with 30–74% of organizations reporting similar incidents annually.