> series: anatomy_of_a_breach —— part: 131 —— target: uk_labour_party —— method: ddos —— context: general_election_campaign<span class="cursor-blink">_</span>_
On 11 November 2019, the UK Labour Party confirmed that it had been the target of a large-scale DDoS attack on its digital platforms. A second, smaller attack followed the next day. The attacks, which occurred during the 2019 UK general election campaign, targeted Labour's website and online campaign tools. Cloudflare, which provided DDoS mitigation for the party, confirmed the attacks were 'large-scale' but were successfully mitigated without significant service disruption.
While no data was stolen and the operational impact was limited, the attacks were significant for their context: a major UK political party was targeted during a general election campaign — bringing the cyber threats to democratic processes documented throughout this series (DNC hack 2016, Philippines COMELEC 2016, UK Parliament email attack 2017) directly into the UK's electoral cycle. The source of the attacks was not publicly attributed, and no group claimed responsibility. The NCSC subsequently strengthened its guidance to political parties on cyber resilience.
We'll scope your test for free and tell you exactly what you need. No obligation, no hard sell.
Free Scoping CallThe Labour Party DDoS attacks confirmed that UK democratic processes face the same cyber threats that have affected elections worldwide. From the Russian hack of the DNC (2016) to the Philippines voter data leak (2016) to the UK Parliament brute-force attack (2017), the pattern is clear: democratic institutions and political organisations are cyber targets — whether for disruption, data theft, or influence operations.
The Labour Party DDoS attacks established that UK elections face active cyber threats. For political parties, campaign organisations, local authorities administering elections, and any organisation involved in democratic processes, cyber resilience is not optional — it is a democratic obligation. Cyber Essentials provides the baseline. Infrastructure testing assesses DDoS resilience. SOC in a Box provides 24/7 monitoring during high-threat periods. And UK Cyber Defence provides incident response when democratic infrastructure is targeted.
<a href="/penetration-testing/infrastructure">Infrastructure testing</a> assesses DDoS resilience. <a href="/cyber-essentials">Cyber Essentials</a> provides the baseline. <a href="https://www.socinabox.co.uk">SOC in a Box</a> monitors during elections.
We'll scope your test for free and tell you exactly what you need. No obligation, no hard sell.
Free Scoping Call