London Public Library in Ontario shut down services after a cyberattack

Organization
London Public Library
Exploit
Hacking
Industry
Public Library

London Public Library in London, Ontario took most of its technology offline on December 13, 2023 after what officials first described as a cyber incident and later confirmed as a cyberattack. The system operates 16 branches.

Telephones, staff email, public WiFi, the website, the online catalogue, printers, public computers and digital lending services all went down. Patrons could not place holds, and virtual programs were cancelled. Most branches stayed open for browsing and in-person borrowing, but three smaller locations, Carson, Glanworth and Lambeth, closed and remained shut until early January 2024. The library said it had engaged outside experts and warned that restoring systems could take some time.

The attack followed cyberattacks on Toronto Public Library and the British Library in the preceding weeks.

In an update on January 4, 2024, the library said the personal information of some employees had been accessed and that it had notified Ontario's Information and Privacy Commissioner. It said there was no indication that patron personal information was taken, and that no credit card details were involved because fee and donation payments were processed on external platforms. Ebook and audiobook platforms, digital resources, WiFi, telephones and email had been restored by that point, with public computers and the catalogue still coming back. London Police Service was involved in the investigation.

Sources