UK Police Legal Database admits data breach after dark-web leak by ExfilSquad

On July 26 the Police National Legal Database identified a security incident and has since confirmed that a criminal outfit exfiltrated roughly 135,000 law-enforcement contact records, comprising names, agencies and work email addresses. The agency is collaborating with specialist security firms and the National Crime Agency to determine the attack vector and scope. No authentication credentials were found among the compromised material.

A secondary impact was seen on the Ask the Police advice portal, where only the identities and email addresses of prior question submitters were exposed. Authorities have not disclosed how the attackers accessed the system or whether any ransom demands were made. The incident is tied to the ExfilSquad gang, which earlier this month posted a comparable breach of the Department for Education, claiming to have leaked over 600,000 records.