British Library avoids investigation over ransomware attack, praised again for response

The U.K. Information Commissioner’s Office declined to investigate the British Library’s October 2023 ransomware attack, praising the institution for refusing to pay the extortion demand and for publishing an 18-page incident review; the report noted security failings such as the absence of multi-factor authentication and shared lessons learned to help other organizations.