Bermuda Premier suggests cyber attack may have compromised personal data

Bermuda’s Premier, David Burt, disclosed on Monday that an investigation into the recent cyber attack that crippled the government’s information systems in September has uncovered circumstantial evidence hinting at a potential breach of personal data.

The Premier emphasized that while suspicions exist, there has not been definitive forensic confirmation of data exfiltration.

Unveiling the investigation findings

During a news conference, Premier Burt shared insights into the ongoing probe.

He stated, “The forensic review of the attack and its impact continues, but there has not been a forensic confirmation of the exfiltration of data.”

Despite this absence of concrete evidence, he acknowledged the presence of circumstantial indications that data may have been compromised.

Premier Burt emphasized the cautious approach taken by the government, stating, “Notwithstanding the fact that this has not been forensically confirmed, there is circumstantial evidence that data may have been taken, and we're working on that assumption with the Government's privacy team to ensure that impacted parties can be notified,” he added.

Data security remains paramount

Addressing concerns about data security, Premier Burt underlined the importance of relying on confirmed information.

He stated, “With these investigations, the one thing that is important is that you only state what you know definitively. And as part of this, you look into gathering any forensic evidence that you can point to and say that exfiltration did take place.”

He went on to acknowledge that while the attackers had the capability to access data, they have not definitively confirmed any data exfiltration.

The ongoing investigation and future steps

The Premier refrained from disclosing specific details about the extent or nature of the potential data exposure.

However, he did reveal plans for a parliamentary committee to investigate all aspects of the attack once services have been fully restored.

Premier Burt emphasized that the focus remains on enhancing cybersecurity measures and system restoration before divulging further details.

Minister's updates and critical department

National Security Minister Michael Weeks, who was also present at the press conference, highlighted that the police were providing daily updates on the investigation’s progress.

Nevertheless, he refrained from disclosing additional details.

Premier Burt concluded by providing an update on government departments’ IT systems, noting that one critical department still faces challenges with restoration. He stated, “A critical department that has not been fully restored is the Attorney-General's Chambers and the legislative drafting to ensure that we can continue to draft legislation and orders.”