Skip to main content

Over 100,000 UK Police and staff have personal data leaked in attack on national database

Web Hosting & Remote IT Support
  • UK’s Police National Legal Database (PNLD) breach leaks data of 100k+ criminal justice professionals
  • Threat group ExfilSquad claimed responsibility, posting 1.9 GB of stolen records on the dark web and demanding ransom
  • PNLD notified NCA and ICO, hired specialists, and confirmed passwords weren’t compromised but contact details exposed

The UK’s Police National Legal Database (PNLD) suffered a cyberattack recently, in which it allegedly lost sensitive data on more than 100,000 criminal justice professionals.

In a short press release, PNLD confirmed the breach, saying it happened over a weekend. The threat actors, which were not named in the announcement, were said to have taken names, organizations, and work email addresses belonging to police officers, staff, government partners, and customers.

The announcement also said the stolen information was already published on the dark web, adding that there is “no evidence to suggest that passwords or other security credentials have been compromised.” How the attackers worked their way in was not disclosed in the announcement.

ExfilSquad takes the blame

Following the breach, PNLD hired cyber-security specialists, and notified the National Crime Agency, which started their investigation into the incident.

“All affected organizations were contacted in the days following the incident and provided with further information and guidance,” the announcement reads. “The Information Commissioner’s Office (ICO) has also been notified.”

At the same time, threat actors calling themselves ExfilSquad claimed responsibility for the attack, BleepingComputer reported. The group alleges it stole 135,000 contact records, sharing samples to support their claims. They also said they demanded a ransom in exchange for keeping the data safe.

In the dark web post, ExfilSquad said it obtained 1.9 GB of data, which includes information belonging to 114,000 PNLD subscribers and 21,000 Ask the Police users.

‘Ask the Police’ is a public-facing website where users can find answers to hundreds of commonly asked policing or legal questions.

ExfilSquad is a relatively new threat actor that's not known for any major attacks so far. Prior to the PNLD incident, it claimed the attack against Analog Devices, a US semiconductor company.



via Hosting & Support
Labels:

Comments

Post a Comment

Web Hosting
Remote IT Support
Sites & Socials

Popular posts from this blog

These mobile games are just trying to steal your crypto hoard, FBI warns

Web Hosting & Remote IT Support The FBI has warned consumers about a newly-detected, fake "play-to-earn" mobile and online game that tricks victims into depositing cryptocurrency, only to later steal it.  In a public service announcement , the FBI said the elaborate scheme sees scammers first contact the potential victim and try to build a relationship with them.  After a little back-and-forth, the scammers would invite the victim to play an online or mobile game, in which players purportedly earn cryptocurrency rewards in exchange for some activity, “such as growing ‘crops’ on an animated farm” the FBI said.  Depositing cryptos But getting into the “game” isn’t free - the victims must first create a cryptocurrency wallet and deposit some money, which is where the real scam begins. The fraudsters would later also tell the victims that the more funds they deposit, the higher the gains will be. However, as soon as the victim stops depositing additional funds, the...
Post a Comment
Read more

Want a remote control for your smart home? SwitchBot has made a Matter-compatible one

Web Hosting & Remote IT Support SwitchBot has launched a unique piece of tech capable of controlling smart home devices and infrared appliances. And the best part is you don’t need to connect it to a smartphone or to the internet as it functions perfectly offline.  Aptly named the SwitchBot Universal Remote , it has large spacious buttons, a navigation wheel in the middle, and a 2.4-inch LCD at the top. The company states in their announcement it sought to create a “user-friendly design” that everybody can understand. Now, you can’t just point the Universal Remote at a device and then push a button to issue commands immediately. According to Android Central , you must first choose what you want to control, which can be done by pressing the center red button. Pressing the main button will let you change which group of smart home devices to control.  Universal Remote has launched! 🚀 Consolidate all your remotes, and control everything at home, even #automation! NOW,...
Post a Comment
Read more