Suppliers holding UK police data repeatedly breached since 2021
Original title: Hackers repeatedly breached suppliers holding UK police data, watchdog finds
The inspectorate withheld which suppliers and forces were hit and does not say whether those attacks stole data.
Britain’s policing inspectorate said the Police Digital Service and National Police Chiefs’ Council reported multiple cyberattacks since 2021 on third-party suppliers holding police information. Operational details were removed, and neither the Home Office nor the chiefs’ council answered whether police data was compromised. Separately, policing recorded 252 cybersecurity incidents and 796 near misses in the first three months of this year. Inspectors said most supplier contracts lacked ongoing security assurance.
Unconfirmed: The report does not say how many supplier attacks occurred, which organizations were affected, or whether data was stolen.
- Supplier-held victim, safeguarding, intelligence and investigation data is called a critical risk.
- The 252 incidents included malware, unauthorized access and accidental staff disclosures.
- Several forces could not see supplier-held system logs routinely.
- Policing and fire services were omitted from the Cyber Security and Resilience Bill.
- A 2023 Digital ID ransomware attack exposed Metropolitan Police officer and staff details.
Impact: Repeated compromise of suppliers holding UK police information
From the original article
3 min read at therecord.mediaHis Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.