British Library cyberattack exposes cultural sector's IT vulnerabilities

On October 28, 2023, the British Library in London suffered a major cyberattack by a criminal organization that held its data hostage. The institution refused to pay the ransom, leading to the destruction of key software and the publication of some stolen data. The incident, detailed by Viola Stefanello on Il Post, highlights the urgent need for robust cybersecurity measures in cultural institutions. Many museums and libraries rely on third-party IT systems for ticketing and user management, but smaller institutions often lack updated hardware and in-house cybersecurity expertise. The push for digitization of archives, museum collections, and BYOD (bring your own device) services increases vulnerability, especially as user profiling becomes more common—collecting data on preferences, visit frequency, and borrowed texts. This data could be exploited by AI to create personal profiles. The article argues that while outsourcing IT is viable for museums, libraries and archives require internal IT specialists and data portability to avoid vendor lock-in. Ultimately, cultural institutions must prioritize basic cybersecurity practices, such as regular backups, before tackling advanced technologies like AI.