The local authority has launched an urgent probe into “suspicious messages” related to outsanding fines after it discovered “malicious activity” on servers last week.
08:53, 28 Jun 2025Updated 08:53, 28 Jun 2025
People have reported receiving messages over outstanding parking fines online
Glasgow City Council has issued a warning over scam parking fine messages amid an ongoing cyber security incident.
The local authority said it had launched an urgent probe into “suspicious messages” after its ICT supplier CGI discovered “malicious activity” on servers managed by a third-party supplier on Thursday June 19.
The council said it made the decision to take affected servers offline while investigations are carried out into the incident, which has affected a number of its day-to-day online services.
These include viewing and commenting on planning applications and paying penalty charges for parking or bus lane contraventions, while some online diaries and calendars not available, such as bin collection schedules.
On Friday, the council said it had become aware of “suspicious messages” being sent to some people in the city and the wider region, directing recipients to pay outstanding parking fines online.
A probe has been launched into the scam messages(Image: Getty Images)
It said it was investigating these texts “as a matter of urgency”, and that details of the messages had been shared with police and national cyber security teams assisting them.
The local authority made clear that it does not use text messages to chase the payment of parking fines, and that it would never call, email or message someone asking for their bank details.
The council said if anybody does need to pay a parking penalty, they should do so by calling the number displayed on the penalty charge notice (PCN).
In a statement earlier this week a spokesperson for the council said they “can’t confirm” whether any data had been stolen in the incident.
It went on: “As a precaution, we are operating on the presumption that customer data related to the currently unavailable web forms may have been exfiltrated, and we have contacted the Information Commissioner’s Office on this basis.
“Until such time as we can ascertain if data has been stolen, and what this may be, we advise anyone who has used any of the affected forms to be particularly cautious about any contact claiming to be from Glasgow City Council.
“Glasgow City Council apologises for the anxiety and inconvenience this will undoubtedly cause.”
Join the Daily Record WhatsApp community!
Get the latest news sent straight to your messages by joining our WhatsApp community today.
You’ll receive daily updates on breaking news as well as the top headlines across Scotland.
No one will be able to see who is signed up and no one can send messages except the Daily Record team.
All you have to do is click here if you’re on mobile, select ‘Join Community’ and you’re in!
If you’re on a desktop, simply scan the QR code above with your phone and click ‘Join Community’.
We also treat our community members to special offers, promotions, and adverts from us and our partners. If you don’t like our community, you can check out any time you like.
To leave our community click on the name at the top of your screen and choose ‘exit group’.
If you’re curious, you can read our Privacy Notice.
The council said that they “can’t totally discount” that the scam messages involve stolen data but that the “early indications” are that it is either the work of opportunistic criminals, or a more widespread scam.
The local authority added that no financial systems have been affected and no details of bank accounts or credit/debit cards processed by those systems have been compromised.
Police Scotland are involved in investigating the cyber incident, along with the council, the Scottish Cyber Co-ordination Centre and the National Cyber Security Centre.
It is the third time in recent months that a local authority has been hit by a cyber attack, after Edinburgh and West Lothian councils were targeted in May.
Anyone contacted by someone claiming to have their data is advised to contact Police Scotland on 101 or call the Cyber Incident Response Helpline on 0800 1670 623.