Housing Ombudsman Security Incident Disrupts Complaint System

The Housing Ombudsman security incident has disrupted the watchdog’s case management system, preventing residents from submitting new complaints through its usual online process. The service disclosed the third-party IT incident on October 13 and said it was investigating alongside its external supplier.

Although the incident has been contained, questions remain about the extent of any data involvement. The watchdog has not confirmed whether personal information was affected.

Case Management Disruption Affects New Complaints

The Housing Ombudsman resolves disputes between social housing residents and landlords in England. Its work covers complaints involving housing associations and other providers of housing services.

However, the incident has interrupted access to the system that supports its case management work. An alert on the watchdog’s website warned residents about the disruption while recovery efforts continued.

Residents who need to raise a new complaint can contact the service by phone or email during the outage. The watchdog said it was working to restore services as quickly as possible, but it provided no confirmed recovery time.

External Supplier Helps Investigate Data Impact

The Housing Ombudsman security incident involved a third-party IT service provider. Consequently, the watchdog is working with that supplier to establish what happened and determine the scope of the incident.

Investigators are also examining whether it affected any personal information. At the time of disclosure, the service had not confirmed data theft or identified the information potentially involved.

The watchdog said it would publish further updates once it could provide more details. Meanwhile, containment does not resolve the outstanding questions about the incident’s impact.

Watchdog Notifies Information Commissioner

The service has notified the Information Commissioner’s Office, the UK’s data protection regulator.

As a precaution, it also urged tenants and leaseholders to remain cautious when receiving unexpected communications. In particular, individuals should verify who is contacting them before sharing personal information.

The watchdog advised people to report suspicious activity to the relevant organization or authorities. However, this precautionary guidance does not establish that attackers accessed residents’ data.

Incident Follows Other Public Sector Cybersecurity Concerns

The disruption comes amid wider efforts to improve cybersecurity across UK public services.

In March, Companies House took its WebFiling platform offline to address a security flaw that had exposed company information since October 2025.

Earlier, in January, the UK government announced a cybersecurity strategy backed by more than £210 million, approximately $283 million. The initiative aims to strengthen defenses across government departments and the broader public sector.

For the Housing Ombudsman, the immediate priorities remain restoring access to services and establishing whether the incident affected personal information. Residents awaiting updates can continue to use the alternative contact channels announced by the watchdog.