Ransomware Attack on Data Cymru

What happened

A ransomware attack on Data Cymru, a Welsh government-funded organization, compromised the personal details of thousands of children and their families. The attack occurred in November 2024, and an investigation by the UK's Information Commissioner's Office (ICO) revealed that the attackers gained initial access to Data Cymru's network via a compromised test account protected by the password 'Password1'.

Reported impact

Attack method

ransomware attack

Data access

unknown

Read the original reporting and statements. Multiple articles may rely on the same underlying source.

Infosecurity Magazine01

Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ - Infosecurity Magazine

Published 21 Oct 2026·Retrieved 3 Nov 2026

Attackers gained initial access to Data Cymru’s network via a compromised test account known as ‘Test 2’, which had existed for more than 12 years. It was solely protected by the password ‘Password1’.

Attributed reporting

2 more excerpts

The personal details of thousands of children and their families were breached in Wales after ransomware attackers compromised an account protected by a ‘Password1’ password, an investigation by the UK’s Information Commissioner’s Office (ICO) has revealed.

Attributed reporting

The data protection regulator issued a reprimand to Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales, known as Data Cymru, for security failings relating to the November 2024 incident.

Attributed reporting