On Thursday 5th September 2024, the Change Mental Health website experienced a cyber-attack, resulting in a temporary disruption to online services.

Upon detecting the incident, our team immediately followed best-practice response protocols, which included taking the affected website offline and initiating our business continuity plan to safeguard our operations and data.

We have notified the relevant authorities, including the National Cyber Security Centre (NCSC) and Police Scotland, and continue to work closely with them to investigate the incident. As of now, there is no evidence that any personal data has been compromised, nor do we have any indication that sensitive information has been leaked or shared. Our IT team has successfully regained control of the website and regular service was restored within three hours of the attack.

Our top priority is ensuring the ongoing security of our systems and the privacy of those who rely on our services. Additional security measures have been implemented to prevent further breaches and we remain vigilant in monitoring all online activity.

Where can I find further advice? 

For useful information on how to stay safe online, you can visit the following trusted resources: 

• National Cyber Security Centre (NCSC) 
• Information Commissioner’s Office (ICO) 
• Action Fraud 
• Get Safe Online 
• Stop Scams UK 

Questions about the incident? 

If you have any questions or concerns about this cyber incident, please email us at
operations@changemh.org. We are committed to responding as quickly as possible and providing any necessary support.