UK Police Legal Database Leaked to Dark Web After July Breach
Names, work emails and organisational details of officers, criminal justice staff and government partners were posted online after intruders hit the Police National Legal Database.
Key points
- The Police National Legal Database (PNLD) confirmed a breach after data was posted on the dark web.
- The intrusion was identified on 26 July.
- Stolen data includes names, organisations and work email addresses of police officers, police staff and criminal justice professionals.
- Government partners and PNLD customers were also caught up in the leak.
- No passwords or operational police records have been reported stolen.
A legal reference service used by every police force in England and Wales has confirmed that contact details for officers and government staff were stolen and dumped on the dark web, a hidden part of the internet that criminals use to trade stolen data.
The Police National Legal Database, known as PNLD, said the breach was spotted on 26 July. The organisation provides legal guidance to police, prosecutors and other criminal justice bodies, and keeps records on the people and organisations that use its service.
According to PNLD, the stolen files contain names, employer details and work email addresses. Those affected include serving police officers, civilian police staff, criminal justice professionals, government partners and paying customers of the database.
Some personal names were also exposed, PNLD said, though the organisation has not yet detailed how many individuals are in the leaked files.
What was actually stolen?
Contact information, not case files. The leaked data is a directory of who uses PNLD and where they work, rather than sensitive legal records, evidence or investigation material. That still matters, because a list of police and government email addresses is a shopping list for anyone running phishing scams, where criminals send fake emails to trick staff into handing over passwords or clicking harmful links.
| Detail | What is known |
|---|---|
| Breach identified | 26 July |
| Data exposed | Names, organisations, work email addresses |
| Groups affected | Police officers, police staff, criminal justice professionals, government partners, customers |
| Where data appeared | Dark web |
| Passwords leaked | Not reported |
Who runs PNLD, and why does this matter?
PNLD is a legal database run under West Yorkshire Police that supplies up-to-date law, guidance and case summaries to every police force in England and Wales, plus prosecutors and other justice agencies. If an officer needs to check a point of law during an investigation, PNLD is one of the tools they reach for.
A leak of its user list is therefore a leak of a slice of Britain's policing and criminal-justice workforce, sorted by name, employer and inbox. That is useful to a foreign intelligence service, an organised crime group, or a fraudster running targeted email scams.
Should the public be worried?
Ordinary members of the public are not directly named in the leaked files, based on what PNLD has disclosed so far. The people at risk are those whose work contact details are now circulating: officers, staff and government partners who should treat any unexpected email, call or text with extra care.
Anyone in that group should watch for messages that pressure them to click a link, log in, or hand over information, even when the sender looks familiar. The Hacker News first reported PNLD's confirmation of the breach.
What happens next?
PNLD has not named a suspect and no criminal group has publicly claimed responsibility. No ransom demand has been reported, and there is no indication so far that PNLD paid anyone. UK regulators, including the Information Commissioner's Office, are typically notified of incidents on this scale within 72 hours.
Expect more detail on victim numbers and the entry point once the internal review is further along. For now, the practical takeaway is narrow but real: British policing has just had its contact book published, and the phishing that follows will be built from it.
