Cyber-attack & data theft: Our response & service status

Submit data

Service status

A sophisticated criminal cyber-attack has had a major impact on the way SEPA works. We are working through all the services that we provide to understand what we need to do in the short and longer term to restore services. We are approaching this work with a sense of urgency.

Service status update: Data returns

What are we able to do now?

Many environmental licences include a requirement to submit data returns or other reporting requirements on an annual or quarterly basis.  

What should you do now?

We are now actively reviewing many of the data returns and kindly request you to submit any outstanding returns for the following areas:

Scottish Pollutant Release Inventory (SPRI):

As a result of the cyber-attack, SEPA is unable to accept SPRI data returns for 2020 via the online reporting portal or the waste LSR system as in previous years, and operators who would normally submit by email were advised through SEPA’s service status, to prepare but not submit their returns.

We are now able to collect SPRI 2020 data, and will do this by email, using an excel form. We will be contacting you in early May using your SPRI contact’s email address. Where we don’t have this, we will look for a suitable alternative and may contact you by phone to confirm the correct contact.

Once your details are confirmed, we will:

  • email you with one form per SPRI site, which will include your published 2019 pollutant emissions and waste transfer data (where available).
  • ask you to complete the form using your 2020 figures, and to provide the usual method and qualification information.
  • ask for this form to be returned by email to by 18 June 2021.
  • supply a brief additional guidance note to help you complete the form.

Waste Data Flow (WDF):

The WDF data submissions and SEPA data validation tool are not impacted and operating as usual. Please submit your data by 31 May 2021. Please send any queries to

Licensed Site Returns (waste) and Material Recovery Facility Code of Practice Returns:

Please submit any outstanding returns to as soon as possible. Submitted returns should be representative of the same reporting periods as stated in your licence or permit, data should not be consolidated in one single return. Please submit all outstanding returns relating to Q4 2020, Annual 2020 and Q1 2021 reporting periods by 30 June 2021. Following this, please revert to the standard reporting schedule. Additional detail, reporting guidance, and current reporting forms are available on our website.

Waste Exemptions (waste):

Please submit any outstanding returns to as soon as possible.

Producer Responsibility (PR):

For businesses who are required to submit Producer Responsibility (PR) data, please continue to use the relevant UK system to submit your data. SEPA is also now able to receive data submissions via the mailbox.

Water resources abstractions:

Please submit any outstanding returns to as soon as possible.

Marine and freshwater pen fish farms 

We are now able to accept data returns and notifications. Permit holders will be contacted individually to request submission, SEPA will provide the appropriate templates. 

Other returns not mentioned above:

For any other returns required by your SEPA licence and not covered above, in most cases we are able to receive these and are proactively contacting licence holders to request submission.  In the interim, if you wish to submit a licence return not covered above, please contact us for advice on the most appropriate means of submission.

For the avoidance of doubt, you should continue to report any environmental incidents as required by your SEPA permit by contacting our 24 Hour Pollution Hotline: 0800 80 70 60.

Submit data

You can submit data, or find out how, to SEPA using the following links:


Radioactive substances