A cyber attack targeting a Stockport-based company specializing in ID cards has resulted in the exposure of police officers' personal details, including those from Greater
Manchester Police (GMP).
The affected company holds information related to various UK organizations, with GMP confirming its awareness of the ransomware attack.
Thousands of police officers' names are potentially at risk of being made public as a result of this breach.
While many officers' names are publicly accessible, there is heightened concern regarding the exposure of undercover officers' identities, according to an anonymous officer interviewed by the BBC.
Assistant Chief Constable Colin McFarlane acknowledged the significance of the situation and noted that, at present, the compromised data does not include financial information. GMP has alerted the Information Commissioner's Office and initiated actions to keep employees informed, answer their inquiries, and provide support. A national criminal investigation into the attack is underway, emphasizing the gravity of the incident.
This incident follows a data breach in the Police Service of Northern Ireland slightly over a month ago, in which the surnames and initials of 10,000 police employees were inadvertently disclosed in response to a Freedom of Information request and subsequently published online before removal.
Last month, the Metropolitan Police faced a similar security breach involving one of its suppliers, highlighting the growing concerns surrounding data security within law enforcement.
Ed Gibson, a former FBI investigator and former head of cyber security at Microsoft UK, expressed deep concern over hacking incidents involving law enforcement data, emphasizing the potential risks if such information fell into the wrong hands. He advised companies facing ransom demands to conduct thorough investigations rather than succumb to extortion.
Mike Peake, chairman of Greater Manchester Police Federation, highlighted the anxiety and concerns officers may experience due to the potential leakage of their personal details into the public domain. Collaborative efforts with the force are underway to mitigate the dangers posed by this breach. Photo by Paul Townley, Wikimedia commons.