A significant data breach has compromised the Police National Legal Database (PNLD) in the UK, exposing the personal and work contact details of police officers, staff, and criminal justice professionals, according to Security Affairs. The compromised information was subsequently published on the dark web, raising concerns about increased phishing and targeted attacks.
The breach affected the PNLD, a legal reference system used by all 43 Home Office police forces in England and Wales, as well as the public Q&A service 'Ask the Police.' Exposed data includes names, organizations, and work email addresses. While passwords were not compromised, the leaked information makes officers and staff more vulnerable to sophisticated phishing attempts.
The National Crime Agency is investigating the incident, with cybersecurity firms suggesting a potential link to misconfigured Microsoft Power Pages portals, a vulnerability that could allow anonymous users to access data. The PNLD hosts legal information and services but is not a crime recording system. Affected organizations have been notified, and the incident reported to the UK Information Commissioner's Office. The extortion group ExfilSquad has been linked to similar attacks, though attribution for this specific breach is not yet confirmed.
Source: Security Affairs
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
An error occurred trying to play the stream. Please reload the page and try again.
CloseRegistering with SC Media is 100% free. Join tens of thousands of cybersecurity leaders today and gain access to the latest analysis shaping the global infosec agenda.
