Labour sticks to ‘basic’ $20 cyber defence after attacks, emails show

Britain's opposition Labour Party was using a $20-a-month "basic security" service to protect its website when hackers attempted to force it offline last week and temporarily slowed down online campaigning, according to internal emails seen by Reuters.
Such entry-level protection is not recommended for large organisations at high risk of cyber-attacks, but the messages show Labour has since decided against upgrading to an increased security package on grounds of cost.
Labour and Britain's governing Conservative Party were hit by back-to-back cyber-attacks last week, just days into an election campaign security officials have warned could be disrupted by foreign hackers.
Labour uses the services of cybersecurity firm Cloudflare to help protect its website from attacks, party emails show, but only the level the company recommends for "professional websites, blogs, and portfolios requiring basic security."
After the attacks, the party considered upgrading to the increased security measures used by large organisations to help ensure their websites stay online, but decided the $60,000 annual cost was unjustifiable, according to the emails.
While the lower-tier security package protected the Labour site from major damage, it may not be enough if the party is hit by more sophisticated attacks, said a person with knowledge of the matter.
In a separate message, Labour's head of technology warned that the party could be at increased risk of cyber-attacks on the days of two televised election debates and its upcoming manifesto launch.
A Labour party spokesman declined to comment. Cloudflare did not respond to a request for comment.
A Conservative Party spokeswoman did not respond directly to questions about the type of website defences used by the party.
"We have the appropriate security measures in place to protect the party's IT and web infrastructure so were not disrupted in the recent incident," she said.
Election
The country's security agencies have warned that Russia and other countries may attempt to disrupt the election with cyber-attacks or divisive political messages on social media, a charge Moscow denies.
Officials say initial investigations have found nothing to link the attacks on Labour and the Conservatives to a foreign state.
The attackers used a common and relatively simple technique to attempt to force the parties' web services offline by flooding them with traffic.
Cloudflare says its services help defend against so-called distributed denial-of-service (DDoS) attacks by filtering out malicious website requests and absorbing the additional traffic.
Both Labour and the Conservatives have provided data to the police and Britain's National Cyber Security Centre (NCSC), part of the GCHQ signals intelligence agency, to help investigate the attacks, according to people with knowledge of the matter.
The NCSC said analysis was ongoing following last week's attacks but declined to comment on specific defences used by individual political parties.
"We are confident that the Labour party took the necessary steps to deal with the attack. The attack was not successful," an NCSC spokeswoman said, adding that major parties have been briefed on how to guard against future DDoS attacks.
source teiss
Industry: Cyber Security

Latest Jobs
-
- Network Security Engineer
- Germany
- €550 a day
-
German- based contract opportunity This is an onsite based position, we would need the Network Security engineer to be able to work on the client site 5 days a week Seeking an experienced Network Security Engineer for a leading technology company. Strong expertise in firewall/IPS solutions, proxy solutions, and certificate management is required. Good hands-on experience in networking and web-related technologies necessary. Strong problem-solving skills and the ability to work under pressure are essential. we are looking for a Network Security Engineer with the following experience: · Expertise in Administration, Management & Troubleshooting of Firewall / IPS solutions / Proxy solutions/Certificate Management Solutions · Good Hands-on Experience on security devices (PaloAlto/ /McAfee Proxy/CISCO ISE/Certificate Management) · Good Hands-on Experience in Networking with skills of switching, routing & wireless Technologies · Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocol · Configuration of NAT / PAT, firewall policies, profiling, objects, AD-Integration, backup – restore · Knowledge of Subnetting TCP/IP Communication, VLSM Configuration of VLAN VTP · Configuration of Routing Protocols e.g. RIPv1 & v2, OSPF, EIGRP, BGP Knowledge of standard and extended ACL 12 month contract
-
- IAM Consultant
- N/A
- Upto £110,000 depending on level of position
-
Identity Access Management (IAM) Consultant Location: Germany We are seeking an experienced IAM consultants in Germany. we are looking for people from consultant through to Architect, The ideal candidate will have previous IAM deployment experience and be fluent in German. Key responsibilities: Design and implement IAM solutions for clients Provide expertise on industry best practices and standards Troubleshoot and resolve IAM-related issues Work closely with clients to understand their business requirements and provide solutions to meet those needs Qualifications: Previous deployment experience with IAM solutions Fluency in German Strong understanding of IAM technologies and principles Excellent communication and project management skills If you are an experienced IAM consultant with a strong track record of delivering successful projects, please apply today.
-
- ForgeRock Consultant
- Spain
- Upto €85000 plus benefits
-
ForgeRock deployment consultant is needed for this expanding IT Services business within Spain, to act as their ForgeRock technical lead, Responsibilities include: High level and low level design, Scoping the techical needs of the project design, configure, develop and test the forgeRock deployment. We are looking for a strong IAM consultant ideally with ForgeRock experience, Must have strong Oauth 2.0, SAML and API experience
-
- IAM Consultant
- France
- Upto €85000 plus benefits
-
An Identity & Access Management Consultant is needed for an expanding IT Security consultancy, based in France. (Remote role with monthly office meet-ups) The Identity & Access Management Consultant will be responsible for the technical design and implementation of Identity & Access Management/IAM products for a wide variety of clients. Deliver bespoke end-to-end consultancy service to our clients, from gathering requirements through to implementation. Work in a close team designing, developing, and implementing first-class IAM solutions. Manage client relationships, working closely with key stakeholders to continually evaluate business requirements and ensure the highest quality solution delivery. If you are interested we are looking for an individual with Previous experience working within the IAM or CIAM field is essential, Strong knowledge with SAML and Oauth and ideally OpenID Previous experience from any of these technologies: One Identity, SailPoint, Saviynt, Ubisecure, Ping Identity, would be advantageous