In November 2023, Comhairle nan Eilean Siar (Western Isles Council, Scotland) fell victim to a sophisticated cyber attack where hackers installed malicious software, crippling critical systems and backups. The breach disrupted essential public services, including council tax processing, non-domestic rates, and benefits administration, leaving both staff and residents unable to access these functions for an extended period. Despite the council’s swift emergency response—praised by the Accounts Commission for its effectiveness—backlogs persisted two years later, straining employees under increased workloads and stress.The attack exposed vulnerabilities in the council’s business continuity and disaster recovery plans, which had not been tested for scenarios of this severity. While no explicit data theft (e.g., personal or financial records) was confirmed in the article, the prolonged service outages and reliance on manual workarounds underscored the attack’s severe operational impact. The council acknowledged the need for routine cyber incident response testing and staff support improvements to mitigate future risks. The incident served as a warning for all Scottish councils about the escalating threat of cyber disruptions to public sector infrastructure.