One year on, Government reflects on cyberattack
The Government has reflected on the impact of Bermuda’s nationwide cyberattack as the one-year anniversary of the incident approaches.
Leaders yesterday pledged to use the incident as a learning experience.
David Burt, the Premier, said: “Our experience has deepened our understanding of cybersecurity and we are committed to using these insights to fortify our defences.“
“The Bermuda Government is making solid progress in stabilising and enhancing the environment by upgrading systems and services, increasing staff to address shortages and actively identifying, evaluating and mitigating potential security threats and vulnerabilities on an ongoing basis.
“This approach ensures that the Government’s security measures are continuously strengthened, keeping the environment protected from emerging risks such as cyberattacks, data breaches or system failures.
“Additionally, enhanced system monitoring has been implemented to further support these efforts.”
On September 20 last year, the Government’s IT systems were hacked, causing widespread disruptions across key services and digital payment systems.
Essential services operated at limited capacity as restoration efforts, with the help of Britain’s National Cybersecurity Centre, slowly paid off over the course of months.
Mr Burt said that the attack was “an unprecedented challenge for Bermuda,” adding that “it tested the resilience of our digital infrastructure and the strength of our response mechanisms”.
"Despite the gravity of the situation, essential services remained operational,“ the Premier said.
”This incident has underscored the growing threats in the digital age and provided us with invaluable lessons.”
The Government stood by its decision to keep a tight grip on details surrounding the attack.
A spokeswoman said that cybersecurity threats demanded a level of confidentiality to make sure that the problem was not worsened, especially as an investigation was continuing.
She added that despite this, regular updates were provided, barring some sensitive detail, to maintain public trust.
Since the attack, the Ministry of National Security turned its attention towards preventive measures.
A cybersecurity task force was created to lead the greater Cybersecurity Incident Response Team and protect public and private digital infrastructure.
The unit will also offer educational and employment opportunities for Bermudians who want to get involved in cybersecurity.
The Government is working with the Council of Europe to update the island’s legislation around cybercrime so that it better aligns with the Budapest Convention on Cybercrime.
The new laws are being drafted and, if successful, will strengthen Bermuda’s ability to investigate and prosecute cybercrimes internationally.
Investment has also been made in public awareness of cybersecurity.
Campaigns were launched to educate residents about the dangers of cyber threats, particularly to vulnerable groups such as seniors and young people.
Michael Weeks, the Minister of National Security, thanked IT professionals and first responders who worked around the clock after the hack.
He added: "Their dedication and expertise were instrumental in overcoming a deeply disruptive event.
“In the year since the attack, Bermuda has taken significant steps to fortify its defences, including the establishment of the Cybersecurity Incident Response Team and the passage of new cybersecurity legislation.”