UK Police Legal Database Leaked to Dark Web After July Breach
Names, work emails and organisational details of officers, criminal justice staff and government partners were posted online after intruders hit the Police National Legal Database.
Key points
- The Police National Legal Database (PNLD) confirmed a breach after data was posted on the dark web.
- The intrusion was identified on 26 July.
- Stolen data includes names, organisations and work email addresses of police officers, police staff and criminal justice professionals.
- Government partners and PNLD customers were also caught up in the leak.
- No passwords or operational police records have been reported stolen.
A legal reference service used by every police force in England and Wales has confirmed that contact details for officers and government staff were stolen and dumped on the dark web, a hidden part of the internet criminals use to trade stolen data. PNLD said the breach was spotted on 26 July. The organisation keeps records on the people and bodies that use its service, and it's those records that were taken.
The stolen files contain names, employer details and work email addresses. Those affected include serving police officers, civilian police staff, criminal justice professionals, government partners and paying customers. Some personal names were also exposed, though PNLD hasn't detailed how many individuals are in the leaked files.
What was actually stolen?
Contact information, not case files. The leaked data is a directory of who uses PNLD and where they work, not evidence or investigation material. That still matters: a list of police and government email addresses is a ready resource for anyone running phishing scams, where criminals send fake emails to trick staff into handing over passwords or clicking harmful links. Our 23 July story on the Kratos phishing network takedown is a reminder of how quickly those operations rebuild after disruption.
| Detail | What is known |
|---|---|
| Breach identified | 26 July |
| Data exposed | Names, organisations, work email addresses |
| Groups affected | Police officers, police staff, criminal justice professionals, government partners, customers |
| Where data appeared | Dark web |
| Passwords leaked | Not reported |
Who runs PNLD, and why does this matter?
PNLD is a legal database run under West Yorkshire Police that supplies up-to-date law and case summaries to every police force in England and Wales, plus prosecutors and other justice agencies. If an officer needs to check a point of law during an investigation, PNLD is one of the tools they reach for.
A leak of its user list is therefore a leak of a slice of Britain's policing and criminal-justice workforce, sorted by name, employer and inbox. That's useful to a foreign intelligence service, an organised crime group, or a fraudster running targeted email scams.
Should the public be worried?
Ordinary members of the public aren't directly named in the leaked files, based on what PNLD has disclosed so far. The people at risk are those whose work contact details are now circulating: officers, staff and government partners who should treat any unexpected email, call or text with extra care.
Anyone in that group should watch for messages that pressure them to click a link or hand over information, even when the sender looks familiar. The Hacker News first reported PNLD's confirmation of the breach.
What happens next?
PNLD hasn't named a suspect and no criminal group has publicly claimed responsibility. No ransom demand has been reported, and there's no indication so far that PNLD paid anyone.
More detail on victim numbers and the entry point will likely follow once the internal review advances. The practical reality is narrow but real: British policing has had its contact book published, and the phishing that follows will be built from it.
