INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Hackers repeatedly breached suppliers holding UK police data watchdog finds

| 2026-10-27 15:07 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
Hackers repeatedly breached suppliers holding UK police data since 2021, according to a report published on October 27, 2026. The His Majesty's Inspectorate of Constabulary and Fire & Rescue Services found that the Police Digital Service and the National Police Chiefs' Council shared information on multiple cyberattacks affecting third-party ICT supply chains which held police information. No attributing entity was identified in the sources as behind these attacks; however, it is reported that hackers gained access to a network holding wiretap data through a third party in the U.S., with investigators suspecting China's involvement. The targeted sector affected by this incident includes policing and fire services.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
FIVE_EYES FIVE_EYES BENELUX BENELUX governmentgovernment
Incident Timeline
‎2026/10/27
Hackers repeatedly breached suppliers holding UK police data since 2021.
organisation Recorded Future News
“A major cyberattack is not a hypothetical scenario.” is the UK Editor for Recorded Future News.
organisation Inspectorate of Constabulary and
Hackers have repeatedly compromised third-party suppliers holding British police data since 2021, according to a report published Tuesday by His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services.
organisation Fire & Rescue Services
Hackers have repeatedly compromised third-party suppliers holding British police data since 2021, according to a report published Tuesday by His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services.
organisation Digital ID
In 2023, a ransomware attack on ID card maker Digital ID exposed the details of Metropolitan Police officers and staff and led to the theft of thousands of Greater Manchester Police officers’ names and photos.
organisation ICT
The inspectorate, which oversees policing in England and Wales and fire services in England, said the Police Digital Service and the National Police Chiefs’ Council shared “information on multiple cyberattacks” affecting “third-party ICT supply chains which held police information.”
organisation the Home Office
Neither the Home Office, Britain’s interior ministry, nor the National Police Chiefs’ Council responded to questions about whether police data was compromised in the supplier attacks.
organisation the National Risk Register 2025
The inspectorate also criticized the government for leaving policing and fire services out of the National Risk Register 2025, the Government Cyber Action Plan published in January and the Cyber Security and Resilience Bill , which is still going through Parliament.
organisation the Cyber Security
The inspectorate also criticized the government for leaving policing and fire services out of the National Risk Register 2025, the Government Cyber Action Plan published in January and the Cyber Security and Resilience Bill , which is still going through Parliament.
organisation Parliament
The inspectorate also criticized the government for leaving policing and fire services out of the National Risk Register 2025, the Government Cyber Action Plan published in January and the Cyber Security and Resilience Bill , which is still going through Parliament.
organisation Wales
Dyfed-Powys Police in Wales disclosed in September that a cyberattack disrupted some of the force’s non-emergency systems and may have compromised staff information.
organisation Inspector of Constabulary
“The cyber threat to police forces and fire and rescue services is significant and expanding rapidly,” said Michelle Skeer, His Majesty’s Inspector of Constabulary.
organisation Sky News
He was previously a technology reporter for Sky News and a fellow at the European Cyber Conflict Research Initiative, now Virtual Routes.
organisation the European Cyber Conflict Research Initiative
He was previously a technology reporter for Sky News and a fellow at the European Cyber Conflict Research Initiative, now Virtual Routes.
organisation Signal
He can be reached securely using Signal on: AlexanderMartin.79
Intelligence Sources
TheRecord 2026-10-27