Dark Web Leak Exposes Data of 100,000 UK Police and Government Staff

Personal data for more than 100,000 UK police officers and staff was reportedly leaked on the dark web after a major breach affecting multiple government bodies. Exposed information included full names and contact details, with reporting indicating the incident also impacted the Ministry of Defence, Home Office, National Crime Agency, and Crown Prosecution Service, adding to concerns over the exposure of sensitive law-enforcement and government personnel records.

The intrusion has been attributed in reporting to the cybercriminal group ExfilSquad, which allegedly listed the victims on its leak site and claimed the access stemmed from Microsoft Power Apps and Dynamics 365 misconfigurations. Specifically, the group said improperly configured permissions on Dataverse tables enabled the data exposure, and the breach was reported after a separate recent compromise involving the Department for Education.