UK Police Legal Database Hit by Major Data Breach, Exposing 135,000 Records
The UK’s Police National Legal Database (PNLD), managed by West Yorkshire Police, has suffered a significant data breach following a cyberattack by the criminal group ExfilSquad. The incident exposed approximately 135,000 contact records, including full names, corporate email addresses, and organizational affiliations of police officers, security personnel, and public agency workers.
Affected individuals span multiple agencies, including the Ministry of Defence (MoD), Home Office, National Crime Agency (NCA), and Crown Prosecution Service (CPS), as well as some members of the public who had previously used the Ask the Police service. The attackers claim to possess a 1.9 GB compressed file of the stolen data, which they have made available for download via a Torrent link. A ransom demand reportedly lower than the potential legal costs of the breach has been issued, though the exact amount remains undisclosed.
The PNLD has confirmed that the compromised system does not contain sensitive information on victims, witnesses, or suspects, nor is it linked to the National Police Database or National Police Computer. However, cybersecurity experts warn that the exposure of identities and institutional email addresses heightens the risk of targeted phishing, social engineering attacks, and identity theft against affected personnel.
The breach has been formally reported to the Information Commissioner’s Office (ICO) and the NCA for investigation. Authorities continue to assess the full scope of the incident.
Crown Prosecution Service TPRM report: https://www.rankiteo.com/company/her-majesty's-crown-prosecution-service
Ministry of Defence TPRM report: https://www.rankiteo.com/company/uk-ministry-of-defence
"id": "uk-her1785912196",
"linkid": "uk-ministry-of-defence, her-majesty's-crown-prosecution-service",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '135,000',
'industry': 'Law Enforcement/Public Sector',
'location': 'United Kingdom',
'name': 'Police National Legal Database (PNLD)',
'type': 'Government Database'},
{'industry': 'Defense/Public Sector',
'location': 'United Kingdom',
'name': 'Ministry of Defence (MoD)',
'type': 'Government Agency'},
{'industry': 'Public Sector',
'location': 'United Kingdom',
'name': 'Home Office',
'type': 'Government Agency'},
{'industry': 'Law Enforcement',
'location': 'United Kingdom',
'name': 'National Crime Agency (NCA)',
'type': 'Government Agency'},
{'industry': 'Legal/Public Sector',
'location': 'United Kingdom',
'name': 'Crown Prosecution Service (CPS)',
'type': 'Government Agency'},
{'location': 'United Kingdom',
'name': 'Ask the Police service users',
'type': 'Public'}],
'data_breach': {'data_exfiltration': 'Yes (1.9 GB compressed file)',
'number_of_records_exposed': '135,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Moderate (no sensitive '
'victim/witness/suspect data)',
'type_of_data_compromised': ['Full names',
'Corporate email addresses',
'Organizational affiliations']},
'description': 'The UK’s Police National Legal Database (PNLD), managed by '
'West Yorkshire Police, suffered a significant data breach '
'following a cyberattack by the criminal group ExfilSquad. The '
'incident exposed approximately 135,000 contact records, '
'including full names, corporate email addresses, and '
'organizational affiliations of police officers, security '
'personnel, and public agency workers.',
'impact': {'brand_reputation_impact': 'High',
'data_compromised': '135,000 contact records',
'identity_theft_risk': 'High',
'systems_affected': 'Police National Legal Database (PNLD)'},
'initial_access_broker': {'data_sold_on_dark_web': 'Yes (Torrent link '
'available)'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain (ransom demand)',
'ransomware': {'data_exfiltration': 'Yes',
'ransom_demanded': 'Undisclosed (reportedly lower than '
'potential legal costs)'},
'references': [{'source': 'Cyber Incident Report'}],
'regulatory_compliance': {'regulatory_notifications': 'Yes (ICO, NCA)'},
'response': {'law_enforcement_notified': 'Yes (NCA)'},
'threat_actor': 'ExfilSquad',
'title': 'UK Police National Legal Database (PNLD) Data Breach',
'type': 'Data Breach'}