5. What is the Electoral Commission doing about it?
As is standard in these situations, we don't know exactly - the Commission doesn't want to broadcast its cyberdefence posture to the world.
We do know that the organisation has worked with external security experts and the National Cyber Security Centre to secure its systems and improve protections around personal data.
Those external partners have strengthened network login requirements, improved the monitoring and alert system for active threats and reviewed and updated the Commission's firewall policies.
Dewi told us, "Breaches happen, but responding quickly to stop further damage, and communicating transparently to regain trust, are critical. On the face of it, neither of those things appears to have happened in this case."
