The British Library recently published an interim report on the major cyber incident that closed its services in October 2023. As at May 2024, the Library’s digital services – including the catalogues and UK Web Archive – are still either off-line or have minimal functionality. Ransomware attackers removed some 600 GB of files including user and staff information and encrypted servers vital to the functioning of the Library’s digital estate. The report details reasons of the successful attack including out of date hardware and software infrastructure and the use of old-fashioned legacy systems that were vulnerable to attack. Long term investment in robust IT, cloud systems, training and modern server architecture is required across the UK’s heritage and memory sector. The report, however, failed to address the hugely damaging impact on users and potential loss of trust in publicly held digital collections. To read the report, visit: british-library-cyber-incident-review-8-march-2024.pdf (bl.uk).