British Library Cyberattack: Stolen User Data for Sale on Dark Web

The British Library confirmed that hackers compromised user data during a cyberattack and put it up for sale on the dark web.

Following the October 31st breach, the library's website, digital services, and some on-site functions remain affected. The Rhysida ransomware group, claiming responsibility, has announced plans to auction the stolen data, including passport scans, starting at 20 Bitcoin (approximately £596,459).

A recent update issued by the library on Monday evening alerted users to evidence of the data theft, with some information surfacing on the dark web. They've engaged cybersecurity experts to assist in the investigation and will notify users about necessary measures. Users with library passwords used elsewhere are urged to change them as a precaution.

Previously, the library disclosed a leak of employee information without user data compromise. However, now the Rhysida group has publicly taken credit and posted proof of the stolen documents online, such as HMRC contracts and passports, which the BBC hasn't confirmed to be authentic.

The ransomware group has set an auction for the "exclusive" data to conclude before 08:00 GMT on November 27, with a sale to a single party. They have a history of similar attacks on the Chilean army, Portugal's Gondomar city, and Scotland's University of West.