The record
Written from the 1 report below. Nothing here is unsourced.
- The Police National Legal Database (PNLD) confirmed that contact details of UK police officers, police staff, criminal justice professionals, government partners and customers were compromised and published on the dark web, with the incident identified on July 26.
- The exposed data included names, organisations and work email addresses, including some from people who contacted Ask the Police, which could make phishing attempts more convincing.
- PNLD says no passwords or security credentials were compromised and that it has notified affected organisations, the ICO, and is working with the National Crime Agency.
- The hacking group ExfilSquad listed PNLD on its leak site, but PNLD has not attributed the breach to the group, and the exact access route and number of affected people remain undisclosed.
What to watch next
- Whether PNLD discloses how many people were affected, when the intrusion began, and how much data was taken.
- Whether investigators confirm or rule out the Power Pages/Anonymous Users access route as the breach vector.
- Whether PNLD attributes the breach to ExfilSquad or another actor.
Coverage1
1 report
English national1
All filed from India
Named United Kingdom · Ask the Police · Home Office · Microsoft · ExfilSquad · Information Commissioner's Office · National Crime Agency · Police National Legal Database · VenariX
The 1 report is listed beside the record.
Ask this story
Answers cite the reports above, or say they can't.