External Audit Plan for the financial year 2025/26
Hammersmith and Fulham Council's 2025/26 external audit plan highlights cyber attack risk following a November 2025 IT incident.
Hammersmith and Fulham Council's external audit plan for the financial year 2025/26 identified IT system compromise due to cyber-attacks as a key risk. This follows a cyber incident in late November 2025, which disconnected the council's finance, payroll, and HR systems until mid-January 2026. A report presented to the Audit Committee in March 2026 stated that the risk of future attacks remains a significant concern for the council.
The external audit plan for the financial year 2025/26 outlines the scope and objectives of the planned audits for Hammersmith and Fulham Council. It serves to identify key risks, such as the IT system compromise, that the council needs to address. The council's IT systems were compromised in a cyber incident in late November 2025, leading to disconnection from critical systems for several weeks.
Key facts
- A report presented to the Audit Committee in March 2026 stated the risk of future cyber attacks remains a significant concern for Hammersmith and Fulham Council. Source
- The external audit plan for the financial year 2025/26 identified IT system compromise due to cyber-attacks as a key risk. Source
- Hammersmith and Fulham Council's IT systems were compromised in a cyber incident in late November 2025. Source
- The cyber incident led to a disconnection from finance, payroll, and HR systems until mid-January 2026. Source
About this summary
This summary was written automatically from our published stories and the council meeting records they draw on. It describes what councils have discussed and decided; it does not take a view on any decision. Each key fact links to the story it comes from. Updated 1 October 2026. Spotted a mistake? Email community@opencouncil.network.