The UK’s Electoral Commission suffered a prolonged cyberattack that went undetected for an extended period, with hackers infiltrating its IT networks for at least three years. While no evidence of election tampering was found during six by-elections held during the breach, the intrusion exposed millions of British voters to potential risks. The Commission faced a formal reprimand from the Information Commissioner’s Office (ICO) due to security lapses, highlighting vulnerabilities in democratic systems. Recovery took three years and required a £250,000 grant, with additional long-term investments in cybersecurity. Despite the recovery, the organization remains uncertain about what data was exfiltrated or the attackers’ objectives. The incident underscored the growing threat to electoral systems globally, forcing the Commission to adopt stricter security measures to prevent future breaches and protect democratic integrity.

A cyber attack that revealed the data of tens of millions of UK voters is thought to have been orchestrated by Russia, prompting concerns that it was an attempt to undermine democracy. The Electoral Commission acknowledged that hackers had gained access to files containing the names and addresses of the 40 million persons registered to vote between 2014 and 2022 in reference to copies of electoral registers. They expressed regret to individuals impacted and assured the public that "significant" steps had been taken to strengthen the security of the systems used by the watchdog.