West Lothian Council listed on interlock ransomware leak site

• Ransomware group: interlock
• Country: United Kingdom
• Sector: Government & Defense
• Announcement date: May 23, 2025

West Lothian Council targeted by interlock ransomware group

The West Lothian Council, a local government authority based in Scotland, has been listed on a leak site associated with the threat actor known as interlock. The announcement, which appeared on May 23, 2025, identifies the council as a victim of the group's operations. This type of listing is a common tactic used by ransomware groups to exert pressure on organizations through public exposure.

Details of the alleged attack

According to the post published by the interlock group, the targeting of the West Lothian Council allegedly occurred on April 30, 2025. This timeline suggests that the breach may have been identified or processed by the threat actors several weeks before the public announcement was made on their leak site.

Ransomware groups often utilize leak sites to conduct double extortion campaigns. In these scenarios, attackers do not merely encrypt an organization's data to disrupt operations; they also threaten to release sensitive information to the public to increase the likelihood of a ransom payment. By listing an organization on a public platform, the attackers aim to damage the victim's reputation and create urgency through public scrutiny.

Information regarding the leaked data

At this time, there is no information available regarding the nature of the alleged leaked data. The group has not provided specific details concerning the types of files or the volume of information involved in the incident. Furthermore, the screenshot provided by the threat actor does not contain any data samples; it displays only a generic error page, specifically a 404 Not Found error.

• No specific data types were named in the listing.

The lack of concrete evidence or data samples in the initial announcement makes it difficult to determine the exact scope of the incident. While the group has claimed a breach, the absence of visible data or a specific file count leaves the actual impact unverified by the provided evidence.

About West Lothian Council

West Lothian Council is the local government authority for the West Lothian area in Scotland. It is responsible for managing public services including education, local legislation, and economic programs. As a government entity, the council manages various administrative functions that are essential to the local community's daily operations and public welfare.

Potential implications and risks

Information regarding the interlock group remains limited, making it difficult to assess their specific methodologies. However, because the West Lothian Council provides essential public services, a potential data breach may lead to the exposure of citizens' personal information. Such an event carries significant secondary risks, including the potential use of leaked data for identity theft or targeted phishing attacks against the public.

From a regulatory perspective, considering the institution's data protection obligations under the UK GDPR, this incident could trigger legal and administrative processes. Organizations in the government and defense sector must prioritize data protection to maintain public trust and ensure operational continuity. A successful breach can undermine the confidence citizens place in their local government's ability to handle sensitive information securely.

To mitigate such risks, organizations typically focus on robust defensive measures. These include implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized access. Strengthening incident response plans is also a critical component for government entities to ensure they can react effectively to potential threats and minimize the impact on public services.