Metropolitan Police

Police in Manchester, England, reported that a third-party provider who stores some of the company's personnel information had been the victim of a ransomware assault.

Financial information is not thought to have been part of the compromised data, according to Greater Manchester Police (GMP).

McFarlane said that GMP had spoken with the Information Commissioner's Office in Britain regarding the issue.

The names, ranks, and vetting statuses of its officers and personnel were accessible through an illegal entry to one of its suppliers' IT systems, according to the Metropolitan Police of London.

Source: https://www.reuters.com/world/uk/uks-manchester-police-says-supplier-hit-by-ransomware-attack-2023-09-14/

TPRM report: https://scoringcyber.rankiteo.com/company/metpoliceuk

"id": "met102117923",
"linkid": "metpoliceuk",
"type": "Ransomware",
"date": "09/2023",
"severity": "75",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Government',
                        'location': 'Manchester, England',
                        'name': 'Greater Manchester Police',
                        'type': 'Law Enforcement'}],
 'attack_vector': 'Illegal entry to IT systems',
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'ranks',
                                                         'vetting statuses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personnel information']},
 'description': 'Police in Manchester, England, reported that a third-party '
                "provider who stores some of the company's personnel "
                'information had been the victim of a ransomware assault. '
                'Financial information is not thought to have been part of the '
                'compromised data, according to Greater Manchester Police '
                '(GMP). McFarlane said that GMP had spoken with the '
                "Information Commissioner's Office in Britain regarding the "
                'issue. The names, ranks, and vetting statuses of its officers '
                'and personnel were accessible through an illegal entry to one '
                "of its suppliers' IT systems, according to the Metropolitan "
                'Police of London.',
 'impact': {'data_compromised': ['names', 'ranks', 'vetting statuses']},
 'motivation': 'Data Theft',
 'regulatory_compliance': {'regulatory_notifications': ['Information '
                                                        "Commissioner's Office "
                                                        'in Britain']},
 'title': 'Ransomware Attack on Third-Party Provider of Greater Manchester '
          'Police',
 'type': 'Ransomware'}