ExfilSquad hackers leak info of over 100,000 UK police officers, staff
A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals. The intrusion was detected on Sunday, July 26, and was later claimed by the ExfilSquad data extort…
Intelligence analysis by Llama
ExfilSquad hackers have leaked information of over 100,000 UK police officers and staff after a cyberattack on the Police National Legal Database (PNLD). The breach exposed full names, organizations, and email addresses of police officers, staff, and government partners.
Imagine someone breaking into a big database where police officers' contact information is stored. They got in and took a lot of information, including names, organizations, and email addresses. This is a big deal because it could make it harder for police officers to do their jobs and keep people safe.
Analysis
A Massive Data Breach Exposes UK Police Officers' Information
The recent cyberattack on the Police National Legal Database (PNLD) has compromised the contact data of over 100,000 police officers and other criminal justice professionals in the UK. The breach, which was detected on Sunday, July 26, was later claimed by the ExfilSquad data extortion group, which alleges it stole 135,000 contact records.
PNLD is an online legal resource service that has been used for over 30 years by the 43 Home Office police forces in England and Wales, as well as the British Transport Police. The service also operates 'Ask the Police,' a public-facing website with answers to hundreds of common policing and legal questions.
The incident is now being investigated with assistance from cybersecurity experts and the National Crime Agency (NCA). No evidence has been found that passwords or other security credentials have been compromised. PNLD does not hold confidential information relating to victims, witnesses, or offenders, and says no such data was impacted.
ExfilSquad's Demands and the Leaked Data
ExfilSquad claims to have stolen 1.9 GB of data from PNLD, including approximately 135,000 records. According to the group, the data consists of information belonging to 114,000 PNLD subscribers and 21,000 Ask the Police users. ExfilSquad leak of PNLD data
ExfilSquad is the same threat actor that recently claimed an attack on American semiconductor company Analog Devices. PNLD has confirmed the breach and publication of contact details but has not publicly attributed the intrusion or disclosed how attackers gained access.
The Investigation and Response
The Information Commissioner's Office (ICO) has been notified, and all affected organizations were contacted in the days following the incident and provided with further information and guidance. PNLD says that no confidential information relating to victims, witnesses, or offenders was impacted.
The incident serves as a reminder of the importance of robust cybersecurity measures and the need for organizations to prioritize the protection of sensitive information.
Key points
- ExfilSquad hackers breached the Police National Legal Database (PNLD) and leaked information of over 100,000 UK police officers and staff.
- The breach exposed full names, organizations, and email addresses of police officers, staff, and government partners.
- PNLD has confirmed the breach and publication of contact details but has not publicly attributed the intrusion or disclosed how attackers gained access.
- The incident is now being investigated with assistance from cybersecurity experts and the National Crime Agency (NCA).
The UK government and law enforcement agencies may take this opportunity to review and improve their cybersecurity measures, potentially preventing similar breaches in the future.
The leaked information could be used by malicious actors to target police officers and their families, potentially putting them at risk of harm or harassment.
