Loading story…
A large cache of allegedly stolen Los Angeles Police Department documents was leaked online, exposing sensitive records that reportedly include officer personnel files, internal affairs investigations, and discovery materials containing unredacted criminal complaints, witness names, medical information, and other personal data. Reporting indicates the exposed archive may total 7.7 terabytes across more than 337,000 files, making it a significant disclosure of police records that are typically protected under California law.
The LAPD said it is investigating and stated that its own systems were not directly breached; instead, the compromised repository belonged to the LA City Attorney’s Office. Emma Best of Distributed Denial of Secrets attributed the leak to the extortion gang World Leaks, which reportedly emerged as a rebrand of Hunters International and briefly posted the files on its leak site before removing them, a tactic commonly used to pressure victims into paying ransom demands.
See attribution, scope, and your downstream exposure.
6 events from the most recent confirmed update back to the earliest known activity.
Officials cited on April 9 said the compromised LAPD-related documents stored in the Los Angeles City Attorney’s system were associated with previously resolved civil litigation cases. This clarified the nature of at least some of the exposed records beyond earlier descriptions of personnel and internal files.
The FBI confirmed it is investigating the exposure of LAPD-related records tied to the Los Angeles City Attorney’s Office breach. The announcement marked a law enforcement response to the incident beyond the city’s internal investigation.
The LAPD said it was investigating the incident and stated that its own systems were not directly breached. According to the department, the affected environment was a digital storage system belonging to the Los Angeles City Attorney's Office.
Emma Best of Distributed Denial of Secrets said the breach was carried out by the extortion gang World Leaks after reviewing some of the leaked files. The attribution linked the incident to the group's ransomware-style leak site operations.
A large cache of allegedly stolen Los Angeles Police Department documents was leaked online, including personnel files, internal affairs records, and discovery materials containing personal and medical information. Reporting said the exposed dataset may total about 7.7 terabytes across more than 337,000 files and was briefly posted before being removed from the gang's leak site.
Reporting cited in the coverage says the extortion gang World Leaks emerged in January 2025 as a rebrand of Hunters International. This provides the attributed threat actor context for the later LAPD-related leak.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
8 references tracked. Mallory keeps watching after this page renders.
techrepublic.com
Open sourcescworld.com
Open sourceteiss.co.uk
Open sourceteiss.co.uk
Open sourcedatabreaches.net
Open sourcetherecord.media
Open sourcetechcrunch.com
Open sourcelatimes.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The extortion group **ExfilSquad** claimed responsibility for breaching the U.K. Police National Legal Database (PNLD), a system managed by West Yorkshire Police, and publishing stolen data on the dark web. PNLD said the incident exposed names, organizations, and work email addresses of police officers, staff, criminal justice professionals, government partners, customers, and some users of the **Ask the Police** service. The group said it stole **1.9GB** of data covering roughly **135,000 records**, while PNLD said it had found no evidence that passwords or other security credentials were compromised and that the database does not hold confidential information on victims, witnesses, or offenders. Authorities said specialist cybersecurity organizations and the **UK National Crime Agency** were involved in the investigation and response. The breach has become a high-profile example of ExfilSquad’s broader hack-and-leak campaign, which targets exposed or misconfigured cloud and SaaS platforms including **Microsoft Dataverse**, **Power Pages**, case management systems, and CRM environments. Researchers said the group recently named **13 additional victims** across the United States, United Kingdom, and Sweden, and has shifted to **torrent-based distribution** of stolen data, using unique trackers and web seeds to make takedowns harder and accelerate spread through P2P networks. Reporting also linked active sharing nodes in **China** and **Russia** to the leaked PNLD data, underscoring the heightened risk of spear-phishing and social engineering against affected police and justice personnel.
Aug 15, 2026
Personal data for more than **100,000 UK police officers and staff** was reportedly leaked on the dark web after a major breach affecting multiple government bodies. Exposed information included **full names and contact details**, with reporting indicating the incident also impacted the **Ministry of Defence**, **Home Office**, **National Crime Agency**, and **Crown Prosecution Service**, adding to concerns over the exposure of sensitive law-enforcement and government personnel records. The intrusion has been attributed in reporting to the cybercriminal group **ExfilSquad**, which allegedly listed the victims on its leak site and claimed the access stemmed from **Microsoft Power Apps** and **Dynamics 365** misconfigurations. Specifically, the group said improperly configured permissions on **Dataverse** tables enabled the data exposure, and the breach was reported after a separate recent compromise involving the **Department for Education**.
Aug 4, 2026
LulzSec launched its first **Operation Anti-Security** disclosure by publishing a torrent of files stolen from the Arizona Department of Public Safety, saying the attack was meant to embarrass law enforcement and protest Arizona’s `SB1070` immigration law. The archive, titled **“Chinga La Migra!”**, reportedly contained border patrol, counter-terrorism, warrant, court, and internal email documents, including material referencing informants used to infiltrate gangs, cartels, motorcycle clubs, Nazi groups, and protest movements. Arizona DPS said the breach appeared authentic and temporarily disabled its website and webmail systems while investigating. The campaign expanded as Anonymous and AntiSec affiliates released additional data allegedly taken from Arizona DPS systems and the personal email accounts of Arizona police officers. Reports said the later dumps exposed sensitive personal information including Social Security numbers, passwords, addresses, voicemails, chat logs, and other private content tied to roughly a dozen officers, while Arizona authorities said ongoing investigations and other critical operational data were not compromised. The disclosures also highlighted weak password practices among affected officers and prompted a joint criminal investigation, as AntiSec supporters threatened further attacks on police and government targets.
Jun 29, 2026