Important Security Notice: Urgent Advice for Recent Website Visitors

Date of Notice: 29 May 2026

Target Window of Risk: Saturday 23 May 2026 (late evening) to Tuesday 26 May 2026 (late morning)

We recently identified and resolved a security incident involving our website. Out of an abundance of caution and in line with our commitment to data protection, we are issuing this public notice to advise recent visitors on how to secure their personal accounts.

What Happened?

External attackers exploited a vulnerability in a third-party plugin used on our website. This allowed them to temporarily inject malicious code that displayed a fraudulent “Continue with Google” pop-up prompt to some visitors.

This prompt was a phishing attempt designed to steal Google account credentials. It did not originate from any internal staff error, and no data stored on our servers (such as customer databases) is currently known to have been compromised.

Am I Affected?

You may be at risk only if you visited our website between late Saturday 23 May 2026 and late morning Tuesday 26 May 2026 AND clicked a “Continue with Google” button that prompted you to enter your Google email and password.

If you visited the site but did not interact with any Google login prompts, you do not need to take action.

What Should I Do If I Entered My Information?

If you believe you entered your Google credentials into this prompt, we strongly advise you to take the following protective steps immediately to secure your digital identity:

1. Change Your Google Password: Change your Google/Gmail account password immediately via your official Google Account settings.
2. Check Connected Devices: Review the “Your Devices” section in your Google Security settings and sign out of any unrecognised devices.
3. Verify Two-Factor Authentication (2FA): Ensure 2FA is enabled on your Google account. If it already was, check that the backup phone numbers or prompts have not been altered.
4. Review Recent Activity: Check your Gmail sent folder, Google Drive, and third-party apps signed in via Google for any unusual activity.
5. Update Shared Passwords: If you reuse your Google password on any other websites or services, change those passwords immediately.

What We Have Done

As soon as this issue was detected, our technical and security teams took immediate action. We isolated the site, removed the malicious code, ran deep security scans, and permanently hardened our systems – including enforcing multi-factor authentication and removing the vulnerable software. We have also proactively reported this incident to the Information Commissioner’s Office (ICO).

We sincerely apologise for this incident and any concern or inconvenience it may cause.

If you have questions or require further assistance regarding this notice, please contact our data response team at: office@londonspeechworkshop.com.