Security force data breaches in UK and Spain

Security forces in the United Kingdom and Spain have experienced significant data breaches involving the personal information of personnel.

In the United Kingdom, a cyberattack on the Police National Legal Database (PNLD) exposed the names, employing organisations, and work email addresses of over 100,000 police officers, staff, and criminal-justice professionals across England and Wales. The breach also included data from the Ministry of Defence, Home Office, National Crime Agency, and Crown Prosecution Service. The hacker group ExfilSquad claimed responsibility for the leak, which appeared on the dark web.

In Spain, a leak affecting approximately 1,000 members of the national police, civil guards, and military personnel has prompted legal action by the professional association Justicia Guardia Civil (Jucil). The compromised data includes names, photographs, telephone numbers, and Telegram identifiers. While authorities have not officially confirmed the source, reports have attributed the leak to the pro-Russian hacking group NoName057. Investigations are ongoing to determine if the data was obtained through institutional database intrusions or personal accounts.