Credit: Adobe Stock

An international serious organised crime group was behind a cyberattack on the Scottish Environment Protection Agency late last year, Police Scotland has concluded.

The hack saw more than 4,000 digital files stolen from the regulator. An independent audit said the attack “displayed significant stealth and malicious sophistication”.

A second hacking attempt was also made in a bid to sabotage SEPA’s attempt to fix the problems caused by the first. The audit also found that while SEPA had “sophisticated defence and detection mechanisms”, two of its backups had been affected by the hack.

Chief executive Terry A’Hearn said: “The audits make it clear we were well protected but that no cybersecurity regime can be 100% secure. A number of learnings have been identified that will help SEPA further improve its cybersecurity. All have been accepted.”

Related content

• ‘Cyberattackers are doing the same things over and over – and too often getting through’
• How secure is government and should we have a right to know?
• DHSC signs £2m six-month deal to improve ability to ‘respond to recover from a cyberattack’

The ransomware attack was detected at shortly after midnight on Christmas Eve last year.

Some of the stolen information was published online, including business and staff details.

The environment watchdog did not respond to the ransom request.

Detective inspector Michael McCullagh said: “Recent attacks against SEPA, the Irish Health Service and wider public, private and third sector organisations are a reminder of growing threat of international cybercrime and that no system can be 100% secure. They’re also a reminder of the growing importance of organisations being ready, resilient, and responsive. SEPA’s work in standing up to, and speaking openly about international serious and organised cybercrime, shows real leadership.”