ExfilSquad hackers leak info of over 100,000 UK police officers, staff

The Police National Legal Database breach exposed personally identifiable information of over 100,000 law enforcement and criminal justice professionals, highlighting the severe risk of centralised databases holding sensitive personnel data without adequate protective controls. The fact that a single extortion group could exfiltrate 1.9 GB of subscriber records suggests insufficient data access controls, inadequate monitoring of bulk data movement, and potentially weak segmentation around a high-value target. While no passwords or victim/witness data were reportedly compromised, the exposure of officer names, organisations, and email addresses creates significant risks for targeted phishing, social engineering, and physical safety threats against named officers. Organisations holding sensitive professional directories must treat personnel contact databases with the same rigour as classified operational data.