Over 100,000 UK Police and staff have personal data leaked in attack on national database
ExfilSquad claims responsibility for the attack, says it asked for a ransom payment.
Over 100,000 criminal justice professionals in the UK had their personal data exposed in a recent cyberattack on the Police National Legal Database (PNLD). Threat group ExfilSquad claimed responsibility for the breach, stating that they stole 1.9 GB of stolen records and posted them on the dark web. The stolen information included names, organizations, and work email addresses of police officers, staff, government partners, and customers, but passwords and other security credentials remained uncompromised.
ExfilSquad demanded a ransom in exchange for not releasing the data publicly. The Police National Legal Database, responsible for managing legal and intelligence information for the UK's police forces, notified the National Crime Agency, the Information Commissioner's Office, and individual organizations affected by the breach. PNLD confirmed the incident happened over a weekend and stated that cyber-security specialists were hired to investigate the attack.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — it may contain errors, so check the original before relying on it.