Brexit referendum site may have been hacked: British MPs

Foreign hackers may have attacked the voter registration website for the Brexit referendum in June last year, a group of British MPs said today.
The website had crashed on registration deadline day, June 7, weeks before the referendum on Britain's membership of the 28-nation bloc European Union (EU) on June 23.
At the time, the UK government had attributed the crash to high demand and extended the registration deadline.
However, MPs on the House of Commons Public Administration Committee said in a report today that a foreign cyber-attack could not be ruled out.
The report did not name the countries that may have been responsible for the crash.

"We do not rule out the possibility that there was foreign interference in the EU referendum caused by a DDOS (distributed denial of service attack) using botnets, though we do not believe that any such interference had any material effect on the outcome of the EU referendum," the report said.

"Lessons in respect of the protection and resilience against possible foreign interference in IT systems that are critical for the functioning of the democratic process must extend beyond the technical," it said.
The UK Cabinet Office, which ran the website, stressed that it did not suspect any "malign intervention".
"We have been very clear about the cause of the website outage in June 2016. It was due to a spike in users just before the registration deadline. There is no evidence to suggest malign intervention. We conducted a full review into the outage and have applied the lessons learned. We will ensure these are applied for all future polls and online services," a Cabinet Office statement said.

According to evidence submitted to the committee from the Association of Electoral Administrators, the electoral registration system "could not cope with the demand... And any contingency measures were wholly inadequate".
The committee called on the government to set up a new Cyber Security Centre to monitor and contain potential attacks on UK elections and referendums, particularly foreign attempts to influence public opinion and disrupt the democratic process.
"The US and UK understanding of 'cyber' is predominantly technical and computer-network based," said the report.
"For example, Russia and China use a cognitive approach based on understanding of mass psychology and of how to exploit individuals.

"The implications of this different understanding of cyber-attack, as purely technical or as reaching beyond the digital to influence public opinion, for the interference in elections and referendums are clear," the report said.
In its report, the committee has also criticised then prime minister David Cameron's "questionable" motives for calling a referendum in the first place, saying it had been done to "call the bluff" of his critics and shut down "unwelcome" debate.
It urged future governments to think carefully before promising nationwide votes on controversial issues, particularly if they are not prepared to implement an outcome they do not like.

"There was no proper planning for a Leave vote so the EU referendum opened up much new controversy and left the prime minister's credibility destroyed," the report added.