Further details of payments made by the Government in connection with a cyberattack in 2023 are to be pursued by the Public Accounts Committee.

A report in July revealed a payment of $4.4 million out of Bermuda’s coffers may have covered a ransom payment to perpetrators of the incident that brought down the Government’s IT systems in 2023.

Earlier this year, the PAC confirmed it was considering conducting a review into financial exchanges related to the event.

A press statement issued on Tuesday by Douglas De Couto, the PAC chairman, confirmed that was going to be the case.

It said: “The committee confirms that it will pursue further details regarding payments made by Government in connection with the September 2023 cyberattack, in keeping with the recommendation of the Joint Select Committee on the Cyber Attack in its recently tabled report.

“That report recommended that the committee, drawing on its expertise in public financial administration, examine the circumstances surrounding the approximately $4.4 million in expenditure recorded against the cyber incident — including to whom payments were made, for what purpose, and on whose authorisation.”

According to the Bermuda Parliament website, the main purpose of the PAC is to examine, consider and report on the accounts showing the appropriation of the sums granted by the legislature, to meet public expenditure.

It has seven members comprising both government and opposition backbenchers.

By long-standing convention, the committee is chaired by a member of the Opposition. Dr De Couto is the shadow finance minister.

His statement added: “The committee generally conducts its work, including the taking of evidence, in confidence.

“This convention is not intended to shield information from the public, but to allow witnesses to speak frankly and fully, in the knowledge that their evidence will be treated responsibly.

“This is common to Public Accounts Committees throughout the Westminster system.”

The committee will report its findings and conclusions publicly once its work is complete.

Additionally, the PAC reminded the public of its recent report on the Government's handling of Covid-19 travel authorisation data, tabled in the House of Assembly on July 18.

The statement said: “That report raised serious concerns regarding the Government’s control over sensitive personal data and its compliance with procurement rules, and it remains available to the public.”

Members of the public are welcome to make submissions on matters relevant to the work of the PAC.

These can be made through the Office of the Clerk to the Legislature, or directly to Dr De Couto, at ddecouto@oba.bm, or to any other member of the committee.