Hackers breach UK government and police systems, steal passwords and personal data

Q: How many records were taken from the Police National Legal Database (PNLD) and what categories of police-related data were included?

The article says 135,000 records were taken from the Police National Legal Database (PNLD). The stolen PNLD data comprised customer service contact details such as names, email addresses, phone numbers and job titles of individuals including police officers, and did not include confidential victim, witness or offender information.

Q: Did the attackers deploy ransomware or encrypt any DfE or PNLD systems according to the article?

According to the article, the DfE has not detected any ransomware or evidence that its systems were encrypted, and the UK government says no sensitive systems were breached. The PNLD breach is described as embarrassing but not serious, with no report of ransomware or encryption of PNLD systems.

Q: What steps did the DfE and PNLD claim they took to contain the breach, and have they reported the incident to regulators?

The article says the DfE said it took "swift action" to contain the incident and that it has not detected any ransomware. The PNLD containment steps are not detailed in the article. Both the DfE and the PNLD have reported the breach to the Information Commissioner’s Office.

The Department for Education and the police have been hit by a cyberattack, exposing more than 740,000 records and the theft of 600,000 lines of code.

VIEW GALLERY - 2

Jak Connor

Tech and Science Editor

Published Jul 30, 2026 4:33 AM CDT

1-minute read time

TL;DR: Hackers called ExfilSquad stole over 740,000 records-607,000 from the Department for Education help‑desk and 135,000 from the Police National Legal Database-exposing names, emails, phone numbers and job titles. Hackers demanded ransom; the DfE says no sensitive systems or other data were accessed and reported the breach.

Voice: Jak ConnorSpeed

0:00 / 2:24

Hackers known as ExfilSquad have stolen over 740,000 records from the UK Department for Education (DfE) and a police legal database, including personal and professional contact details of thousands of individuals.

Hackers breach UK government and police systems, steal passwords and personal data 2

VIEW GALLERY - 2 IMAGES

The breach, as reported by The Guardian, involves 607,000 lines of data from the DfE's help-desk portal and 135,000 records from the Police National Legal Database. The stolen data includes names, email addresses, phone numbers, and job titles of parents, staff, government officials, university workers, and police officers. Additionally, another 135,000 pieces of data were extracted from the police national legal database (PNLD).

The cybercriminals are demanding ransom from the DfE and other victims to prevent the full release of the data. "Be smart and just pay," the hackers wrote in a message seen by Sophos, a cybersecurity company that provided the screenshots to The Guardian, adding that the payment would be a "rounding error" compared to the financial cost of litigation.

Read more: Discord hack reaches new heights as customer service party denies data breach

The PNLD breach is being reported as "embarrassing," but not serious, as the database did not hold confidential victim, witness, or offender information. A senior source briefed on the police database leak noted that if users reused their PNLD passwords elsewhere, the impact could be more severe, and warned officials of using their PNLD password to access other sensitive systems. The UK government insists no sensitive systems were breached and that the DfE acted swiftly to contain the incident.

The DfE and PNLD have reported the breach to the Information Commissioner's Office, but the DfE hasn't detected any ransomware, and said that "swift action" was taken to contain the incident.

Frequently Asked Questions

TweakBot answers common questions about this news using TweakTown's own coverage from this page and related content from our archive. Tap a question to reveal the answer, or type your own below.

Question #1

Which specific DfE systems or portals were compromised and which types of records from the DfE help-desk portal were exposed?

The attack compromised the Department for Education's help-desk portal, with 607,000 lines of data stolen. The exposed records from the DfE help-desk portal included customer service contact details such as names, email addresses, phone numbers, and job titles for parents, staff, government officials, university workers, and police officers. The DfE said no other data has been accessed.

Answered

Question #2

How many records were taken from the Police National Legal Database (PNLD) and what categories of police-related data were included?

Question #3

Did the attackers deploy ransomware or encrypt any DfE or PNLD systems according to the article?

Question #4

What steps did the DfE and PNLD claim they took to contain the breach, and have they reported the incident to regulators?

Have a question not listed here? Ask below and TweakBot will answer it.

"The information involved is limited to customer service contact details relating to individuals and organizations," it said. "No other data has been accessed," said the DfE