Cyber incident update
We're continuing to experience a major technology outage as a result of a cyber-attack. The outage is still affecting our website, online systems and services, as well as some onsite services, however our buildings are still open as usual.
We anticipate restoring more services in the next few weeks, but disruption to certain services is expected to persist for several months. Read these recent blogs from our Chief Executive, Sir Roly Keating, to find out more about the attack and its impact, and our plans for restoring services.
In November the attackers released some of our data onto the dark web including some personal user information. We've contacted our users to alert them to this incident and to offer advice from the National Cyber Security Centre (NCSC) on how to protect themselves, including updating their passwords on other systems.
Because our systems are still unavailable, you can't change the password for our services. However, if you use the same password for non-British Library services, we recommend that you change it as a precaution.
Analysing the data is likely to take several months. Should we find specific information has been compromised, we will alert anyone affected as soon as we can. We are continuing to collaborate with the Metropolitan Police and professional cybersecurity advisors, and are receiving support from the NCSC.
If you have any questions relating to your data you can email our Data Protection Officer at firstname.lastname@example.org.
We're really sorry for the ongoing disruption to our systems and services and we'll provide further updates when we can. Thank you for bearing with us during this ongoing investigation.
Frequently asked questions
Can you tell me what, of my personal data, has been breached?
Please send your request to email@example.com. However, please note that we may not be able to identify exactly what information was compromised given the nature of the attack and we might not be able to action these requests at the moment, but will attempt to do so when we again have access to our systems.
How do I change my password when your website is down?
Because our systems remain unavailable, you won't be able to change the password you have previously used to access British Library services. However, if you use the same password, or one similar, to access other, non-British Library services, we recommend that you change it as a precaution.
If you have not already done so you should take this action immediately. The NCSC provides guidance on staying safe online, as well as specific guidance for individuals who may have been impacted by a data breach.
How long will it take for all your systems to be back up and running?
The assessment of the damage and the replacement of our systems is a significant challenge and will continue for several months. Other organisations who have experienced similar attacks have taken over 12 months to re-establish their operations.
I want to visit, will I be able to access what I need?
At the moment our buildings in London and Yorkshire are open as usual, but our services are limited. You can use our Reading Rooms and public areas for personal study but there is limited access to collection items.
Our exhibitions and events are all going ahead as planned, and our Treasures Gallery, shops, cafes and restaurants in London are open as usual. We anticipate restoring more services in the next few weeks, but disruption to certain services is expected to persist for several months. We’ll update our website and social media channels as soon as we have further information.
My Reader Pass has expired. What do I do?
Can I see collection items if I come on site?
I'm a former member of staff and worried about my personal data - what should I do?
Please email firstname.lastname@example.org and we'll come back to you as soon as we can.
Please email email@example.com (08.30 - 16.30 Monday to Friday).
We'll get back to you as quickly as we can but are currently experiencing a high volume of enquiries so it may take us some time to respond.