PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

The Police National Legal Database (PNLD) suffered a data breach that exposed personal and contact information of police officers, government personnel, and criminal justice professionals. The compromised data, including names and work email addresses, was published on the dark web by a group calling itself ExfilSquad. The breach may have stemmed from misconfigured Microsoft Power Pages with anonymous access enabled, allowing unauthenticated access to Dataverse tables. While no evidence of password compromise or malware use was found, the exposed data could facilitate targeted phishing attacks.

AI-extracted · verify before operational use