Loading story…
LulzSec launched its first Operation Anti-Security disclosure by publishing a torrent of files stolen from the Arizona Department of Public Safety, saying the attack was meant to embarrass law enforcement and protest Arizona’s SB1070 immigration law. The archive, titled “Chinga La Migra!”, reportedly contained border patrol, counter-terrorism, warrant, court, and internal email documents, including material referencing informants used to infiltrate gangs, cartels, motorcycle clubs, Nazi groups, and protest movements. Arizona DPS said the breach appeared authentic and temporarily disabled its website and webmail systems while investigating.
The campaign expanded as Anonymous and AntiSec affiliates released additional data allegedly taken from Arizona DPS systems and the personal email accounts of Arizona police officers. Reports said the later dumps exposed sensitive personal information including Social Security numbers, passwords, addresses, voicemails, chat logs, and other private content tied to roughly a dozen officers, while Arizona authorities said ongoing investigations and other critical operational data were not compromised. The disclosures also highlighted weak password practices among affected officers and prompted a joint criminal investigation, as AntiSec supporters threatened further attacks on police and government targets.
TTPs, infrastructure, and targeting history in one profile.
4 events from the most recent confirmed update back to the earliest known activity.
Following the expanded disclosures, Arizona DPS acknowledged its email system had been breached and said law enforcement agencies had opened a joint criminal investigation. The agency stated that ongoing investigations and other sensitive operational data had not been compromised.
Anonymous published a new batch of data allegedly stolen from Arizona DPS and from personal email accounts of roughly a dozen Arizona police officers. The material reportedly included Social Security numbers, passwords, addresses, voicemails, chat logs, and other private content, expanding on the earlier Arizona-related leak.
Arizona DPS said the leaked documents appeared authentic and confirmed it had been hacked. The agency disabled its website and web-based email while investigating the compromise, which appeared to involve the email accounts of seven officers with weak passwords.
Lulz Security announced the first release of its broader Operation Anti-Security campaign by publishing a torrent of documents stolen from the Arizona Department of Public Safety. The group said it was targeting law enforcement and private security entities and framed the Arizona attack as retaliation for the state's anti-immigration law and alleged racial profiling.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See this adversary's TTPs, infrastructure, and targeting history, correlated against your exposure.
4 references tracked. Mallory keeps watching after this page renders.
pcmag.com
Open sourceweb.archive.org
Open sourcearstechnica.com
Open sourceweb.archive.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A large cache of allegedly stolen Los Angeles Police Department documents was leaked online, exposing sensitive records that reportedly include officer personnel files, internal affairs investigations, and discovery materials containing unredacted criminal complaints, witness names, medical information, and other personal data. Reporting indicates the exposed archive may total **7.7 terabytes** across more than **337,000 files**, making it a significant disclosure of police records that are typically protected under California law. The LAPD said it is investigating and stated that its own systems were not directly breached; instead, the compromised repository belonged to the **LA City Attorney’s Office**. Emma Best of Distributed Denial of Secrets attributed the leak to the extortion gang **World Leaks**, which reportedly emerged as a rebrand of **Hunters International** and briefly posted the files on its leak site before removing them, a tactic commonly used to pressure victims into paying ransom demands.
Jun 29, 2026
The extortion group **ExfilSquad** claimed responsibility for breaching the U.K. Police National Legal Database (PNLD), a system managed by West Yorkshire Police, and publishing stolen data on the dark web. PNLD said the incident exposed names, organizations, and work email addresses of police officers, staff, criminal justice professionals, government partners, customers, and some users of the **Ask the Police** service. The group said it stole **1.9GB** of data covering roughly **135,000 records**, while PNLD said it had found no evidence that passwords or other security credentials were compromised and that the database does not hold confidential information on victims, witnesses, or offenders. Authorities said specialist cybersecurity organizations and the **UK National Crime Agency** were involved in the investigation and response. The breach has become a high-profile example of ExfilSquad’s broader hack-and-leak campaign, which targets exposed or misconfigured cloud and SaaS platforms including **Microsoft Dataverse**, **Power Pages**, case management systems, and CRM environments. Researchers said the group recently named **13 additional victims** across the United States, United Kingdom, and Sweden, and has shifted to **torrent-based distribution** of stolen data, using unique trackers and web seeds to make takedowns harder and accelerate spread through P2P networks. Reporting also linked active sharing nodes in **China** and **Russia** to the leaked PNLD data, underscoring the heightened risk of spear-phishing and social engineering against affected police and justice personnel.
Aug 15, 2026
Arizona’s state court system was compromised after a court employee clicked a malicious link in a phishing email, allowing criminal hackers to copy compressed backup files containing personally identifiable information. The stolen material includes protective-order records and more than 150,000 Foster Care Review Board recommendation reports dating to 2010, potentially exposing highly sensitive information about Arizona residents. The Arizona Supreme Court said it has no evidence that the data has been publicly released, and it has not identified the attackers, their motive, or a responsible ransomware group. The incident was not ransomware and no ransom demand had been received; the FBI is investigating while the Administrative Office of the Courts identifies and notifies affected individuals. Officials said available evidence does not indicate that juror, witness, or court-employee data was included.
Sep 30, 2026