The UK's Parliament Friday sustained a brute-force attack against email credentials (Telegraph). The attack lasted more than twelve hours; security officers responded by shutting down access to online services and requiring password changes (Newsweek). Officials speaking on background attribute the incident to an unnamed foreign nation. There's widespread shock, shock, at the weak passwords and other substandard measures said to be in evidence at Westminster. The principal fear is that MPs and members of their staffs could have been subjected to blackmail (Sunday Times).
On Wednesday another incident touching the British government was disclosed: Cyber Essentials was breached by unspecified parties, with email addresses of consultancies registered as vetted bidders for "certain sensitive and personal information-handling [government] contracts" compromised (Register).
American credentials were also of interest to Russian services involved in spearphishing attempts during November's US elections (NPR).