IT Contractor Data Breach Affects 47,000 Met Police Personnel

key findings

• The data breach exposed the personal information of all 47,000 Met Police officers and staff, including names, photographs, ranks, vetting levels, and identification numbers.

• The data breach was caused by a cyber attack on the IT systems of a contractor responsible for printing warrant cards and staff passes.

• The National Crime Agency (NCA) has been called in to investigate the data breach, as fears mount that organized criminal networks or even terrorists could exploit the stolen data.

• High-ranking officials and officers involved in top-secret operations have been affected by the breach, including Commissioner Sir Mark Rowley and Deputy Commissioner Dame Lynne Owens.

• The breach has raised questions about the security of law enforcement agencies across the UK and has led to calls for improved data security measures.

The Metropolitan Police Force is currently dealing with an extensive data breach involving the personal information of its officers and staff. The breach has exposed the details of all 47,000 personnel, raising concerns about their safety and operational integrity.

The data breach was discovered after cybercriminals penetrated the IT systems of a contractor responsible for printing warrant cards and staff passes, and has left the Metropolitan Police Force on high alert.

The compromised information encompasses a range of sensitive data, including personnel names, photographs, ranks, vetting levels, and identification numbers. While personal details like addresses, phone numbers, and financial information were not accessed, the data breach has nevertheless sparked widespread concerns about the potential misuse of the exposed data.

Rick Prior, the vice-chair of the Metropolitan Police Federation, expressed deep concern over the breach, highlighting the vulnerability that the force’s officers and staff now face. Prior emphasized the crucial role that these personnel play in maintaining public safety and apprehending criminals, making the security of their personal information paramount.

While home to some of the best cybersecurity companies in the world, the state of cybersecurity in the country and employee training is becoming questionable with each passing day. In 2021, UK Police mistakenly deleted 150,000 arrest records due to a software glitch. The deleted data also included DNA and fingerprint records.

“To have their personal details leaked out into the public domain in this manner will cause colleagues incredible concern and anger. We share that sense of fury… this is a staggering security breach that should never have happened.”

Rick Prior – Metropolitan Police Federation

The breach has far-reaching implications beyond just personal information exposure. The National Crime Agency (NCA) has been called in to investigate, as fears mount that organized criminal networks or even terrorists could exploit the stolen data.

The breach’s severity becomes evident as it’s revealed that even high-ranking officials and officers involved in top-secret operations have been impacted. Names such as Commissioner Sir Mark Rowley and Deputy Commissioner Dame Lynne Owens are among those affected.

Counter-terrorism units and officers assigned to protect the Royal Family have also fallen victim to this data breach, amplifying anxieties about potential threats arising from the compromised data.

The gravity of the situation is underscored by the possibility of undercover officers having to be withdrawn from ongoing operations due to compromised identities, potentially undermining critical police work.

This breach follows a series of similar incidents affecting law enforcement agencies across the UK. Just recently, data on 10,000 Northern Ireland police personnel was inadvertently disclosed, further highlighting the urgent need for improved data security measures across the board.

The situation has drawn sharp criticism from experts like ex-Met commander John O’Connor, who called the data breach “utterly outrageous.”

1. Hackers can manipulate Police body cam footages
2. D.C. Police Department suffers ransomware attack
3. Ukraine National Police website down after hacker intrusion
4. Hackers leak 296 GB worth of data from US Police & Fusion centers
5. Police lose evidence to Ryuk ransomware attack; suspects walk free