Cyberattack leaks data of 100,000 UK police officers to dark web
This digest was compiled by AI from multiple sources — links to the originals are below.
A cyber attack leaks the personal information of over 100,000 UK police officers onto the dark web. The breach, blamed on the group ExfilSquad, also exposes officers’ duty assignments from the Police National Legal Database. It follows a July 29 cyberattack on the Department for Education that compromised 607,000 records.
The Leak
Hackers stole data from the Ministry of Defence, Home Office, National Crime Agency, and Crown Prosecution Service, leaking personal details of over 100,000 police officers. The stolen data was posted on dark web forums, including officers' duty locations from the Police National Legal Database (PNLD). The breach is believed to have occurred through a coordinated cyber attack targeting multiple government systems.
The Suspects
UK authorities suspect the cybercrime group ExfilSquad is behind the attack. ExfilSquad has a history of breaching government and law enforcement agencies to expose sensitive data. The group’s motive remains unclear, but experts note a pattern of targeting high-profile public sector databases.
Education Department Breach
On July 29, a separate cyber attack struck the Department for Education, compromising around 607,000 records including phone numbers and email addresses of individuals and organizations. That breach also exposed sensitive personal data and raised concerns about the security of government-held information. The two incidents occurred within days of each other.
What's Next
The UK government has not yet announced specific countermeasures, but cybersecurity teams are investigating the full scope of the leaks. It remains unclear whether additional agencies have been compromised or if further data will surface online.
2 sources
Cyberattack leaks data of 100,000 UK police officers to dark web
