Skip to main content

Written question asked by Kevin Hollinrake (Conservative) on Monday, 9 February 2026, in the House of Commons. It was due for an answer on Wednesday, 11 February 2026. It was answered by Jeremy Wright (Conservative) on Thursday, 12 February 2026 on behalf of the Speaker's Committee on the Electoral Commission.


Electoral Commission: Cybersecurity

Question

To ask the Right hon. Member for Kenilworth and Southam, representing the Speaker's Committee on the Electoral Commission, with reference to the Electoral Commission press release entitled Electoral Commission response to cyber-attack attribution, of 25 March 2024, whether the cyber-attack compromised data other than the electoral registers; and whether it included the Electoral Commission's investigatory data.

Answer

During the cyber-attack in 2021-2022, hostile actors were active in the Electoral Commission’s systems which held our email, our control systems, and copies of the electoral registers. The Commission cannot be certain whether any data was copied or downloaded.

Information, evidence and analysis relating to investigatory matters, along with donations and loans data was held in a separate system not affected by the attack.

The Commission has now significantly strengthened its systems against cyber-attacks and has secured Cyber Essentials Plus accreditation.


Secondary information

Type
Written question
Reference
111737
Session
2024-26
Related items
Electoral Commission: Cybersecurity
Monday, 13 July 2026
Written questions
House of Commons
Subjects
Electoral Commission Cybersecurity
Link
View this Written question on www.parliament.uk