Following the October 2023 ransomware attack on the British Library’s systems, the Library has issued a cyber incident review document. It outlines what is known about the origins of the attack. It describes obstacles to restoration of services, and summarises lessons learned that have relevance for other cultural institutions.