Committee to pursue details of 2023 cyberattack payments
Further details of payments made by the Government in connection with a cyberattack in 2023 are to be pursued by the Public Accounts Committee.
A report in July revealed a payment of $4.4 million out of Bermuda’s coffers may have covered a ransom payment to perpetrators of the incident that brought down the Government’s IT systems.
Cybersecurity and national crime teams in Britain were drafted in to support authorities on the island in September 2023 as all government departments were affected, with telephone, internet and e-mail systems suffering disruption.
A long-awaited document from the joint select committee included an assessment that warned four months earlier that the island’s cybersecurity risk was “critical”.
It concluded that the attack exposed a “national resilience gap” and recommended the PAC look into a possible ransom-related payment.
The PAC subsequently confirmed it was considering conducting a review into financial exchanges related to the event.
A press statement issued by Douglas De Couto, committee chairman, confirmed that was going to be the case.
It said: “The committee confirms that it will pursue further details regarding payments made by Government in connection with the September 2023 cyberattack, in keeping with the recommendation of the Joint Select Committee on the Cyberattack in its recently tabled report.
“That report recommended that the committee, drawing on its expertise in public financial administration, examine the circumstances surrounding the approximately $4.4 million in expenditure recorded against the cyber incident — including to whom payments were made, for what purpose, and on whose authorisation.”
According to the Bermuda Parliament website, the main purpose of the PAC is to examine, consider and report on the accounts showing the appropriation of the sums granted by the legislature, to meet public expenditure.
It has seven members comprising both government and opposition backbenchers.
By longstanding convention, the committee is chaired by a member of the Opposition. Dr De Couto is the shadow finance minister.
His statement added: “The committee generally conducts its work, including the taking of evidence, in confidence.
“This convention is not intended to shield information from the public, but to allow witnesses to speak frankly and fully, in the knowledge that their evidence will be treated responsibly.
“This is common to public accounts committees throughout the Westminster system.”
The committee will report its findings and conclusions publicly once its work is complete.
Additionally, the PAC reminded the public of its recent report on the Government's handling of Covid-19 travel authorisation data, tabled in the House of Assembly on July 18.
The statement said: “That report raised serious concerns regarding the Government’s control over sensitive personal data and its compliance with procurement rules, and it remains available to the public.”
Members of the public are welcome to make submissions on matters relevant to the work of the PAC.
These can be made through the Office of the Clerk to the Legislature, directly to Dr De Couto, at ddecouto@oba.bm, or to any other member of the committee.
• To view the Joint Select Committee report, see Related Media
You must be Registered or to post comment or to vote.
