---
title: "Housing Ombudsman third-party IT incident"
description: "A third-party IT incident interrupted the Housing Ombudsman’s complaint services while personal-data impact remained under investigation."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-10-14"
canonical_url: "https://www.ally.security/incidents/housing-ombudsman-third-party-it-incident-2026"
markdown_url: "https://www.ally.security/incidents/housing-ombudsman-third-party-it-incident-2026.md"
stix_url: "https://www.ally.security/incidents/housing-ombudsman-third-party-it-incident-2026/stix.json"
---

# Housing Ombudsman third-party IT incident

The service contained the incident and worked with its supplier to assess data impact and restore online complaint services.

Last modified Oct 14, 2026 · 1 source

## Summary

- **Environment:** Supplier-supported case-management system
- **Operational impact:** Online complaint access, submissions, web chat and webforms unavailable
- **Financial impact:** No incident cost established in the reviewed evidence

## What happened

The [Housing Ombudsman Service](https://www.housing-ombudsman.org.uk/) disclosed a third-party IT security incident on October 13, 2026. Its [statement](https://www.housing-ombudsman.org.uk/2026/10/13/housing-ombudsman-service-statement-it-security-incident/), updated October 14, says its case-management system was affected. [1](#source-1)

## Impact

An alert on the October 14 page says users could not submit new complaints online, view existing complaints, or use web chat and webforms. Whether personal information was affected remained under investigation. [1](#source-1)

## Timeline

### October 13, 2026 — Incident disclosed

The service announced the third-party IT incident. [1](#source-1)

### October 14, 2026 — Briefing updated

This briefing was last reviewed and updated on October 14, 2026.

## Threat Group & Attack Vector

The supplier, initial access method and attacker were not identified in the statement. [1](#source-1)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

The service said the incident was contained and reported to the [Information Commission](https://ico.org.uk/). It continued assessing the data involved with its supplier and offered email and telephone routes for new complaints. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/housing-ombudsman-third-party-it-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Housing Ombudsman Service statement: IT Security Incident

official · Housing Ombudsman Service · Oct 13, 2026

<https://www.housing-ombudsman.org.uk/2026/10/13/housing-ombudsman-service-statement-it-security-incident/>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Affected Organization · 100% confidence · current**  
   Housing Ombudsman third-party IT incident: Housing Ombudsman Service
2. **Resulted In · 100% confidence · current**  
   Housing Ombudsman third-party IT incident: A third-party IT security incident affected the Housing Ombudsman Service’s case-management system.
3. **Resulted In · 100% confidence · current**  
   Housing Ombudsman third-party IT incident: The October 14 page alert said new online complaints, existing-complaint access, web chat and webforms were unavailable while systems were restored.
4. **Resulted In · 100% confidence · current**  
   Incident disclosed: The service publicly disclosed the third-party incident.
5. **Occurred At · 100% confidence · current**  
   Incident disclosed: 2026-10-13
6. **Disclosed At · 100% confidence · current**  
   Housing Ombudsman third-party IT incident: 2026-10-13
7. **Resulted In · 100% confidence · current**  
   Housing Ombudsman third-party IT incident: The service reported the incident to the Information Commission and offered email and telephone routes for new complaints.
8. **Resulted In · 100% confidence · current**  
   Housing Ombudsman third-party IT incident: Incident disclosed
9. **Resulted In · 100% confidence · current**  
   Housing Ombudsman third-party IT incident: The service said the incident was contained, but whether personal information was affected and the extent of data involved remained under investigation with its supplier.

</details>