Hackers Claim Data Theft from UK Education and Police
A group named ExfilSquad alleges the compromise of sensitive contact details from government and law enforcement systems.
Trust 42Craft 55Hype 65How this was reported ▾
Only one independent source named; no direct document citation.
How well corroborated and evidenced the reporting is. Higher is better.
Lacks affected voices or clear next steps for residents.
Context, balance and separation of fact from comment. Higher is better.
Headline overstates impact; body includes speculative claims.
How far presentation runs ahead of substance. Lower is better.
1 source assessed · methodology
A previously unknown hacking collective, ExfilSquad, has claimed responsibility for cyber-attacks against the UK's Department for Education (DfE) and a police database. The group alleges it has stolen more than 740,000 pieces of data in total. ExfilSquad has posted samples of the compromised information on a leak site, a common tactic used by cybercriminals to solicit payment.
Data Compromised
Sunseeker Holiday Homes enters administration
The Hull-based manufacturer, founded in 2019, has appointed administrators, putting 76 jobs at risk.
According to ExfilSquad's claims, the DfE's help-desk portal had approximately 600,000 lines of data extracted. This data reportedly includes full names, email addresses, and phone numbers belonging to parents and staff. A smaller quantity of similar data was also allegedly taken from the department's Turing portal, which manages a scheme for students studying abroad.
The hackers also claim to have breached the Police National Legal Database (PNLD), a resource used by UK police forces for legal assistance. ExfilSquad stated that 135,000 pieces of data were taken from the PNLD. This information is understood to include the names, employing organisations, and work email addresses of police officers and criminal justice personnel. Some names and addresses of members of the public who had previously used the 'Ask the Police' service were also reportedly accessed.
Demands and Official Statements
Enfield Town Liveable Neighbourhood scheme paused pending review
Transport for London funding for next phase is on hold as council re-evaluates project elements.
ExfilSquad is demanding an unspecified payment from both the DfE and the PNLD. The group has indicated that all stolen data will be uploaded if the requested payment is not made. Screen grabs of messages seen by The Guardian suggest the hackers view the payment as a minor cost compared to potential litigation expenses if the data is released.
The Department for Education has stated that the information accessed was limited to customer service contact details for individuals and organisations. The DfE has asserted that no other data was breached. Similarly, the PNLD has confirmed that the hack did not involve confidential information relating to victims, witnesses, or offenders.
Cybersecurity company Sophos, which reviewed screenshots of the data samples posted by the hackers, indicated that the samples appeared legitimate. The PNLD has also reported that passwords used to access the site were among the stolen data, raising concerns about potential reuse on other systems.
Next Steps
The DfE and the PNLD have reported the incidents to the Information Commissioner's Office, the UK's data protection regulator. The government has stated it is collaborating with the National Cyber Security Centre and the National Crime Agency to investigate the DfE hack. It remains unclear if ransomware was deployed in the attacks.
Questions this report answers
+What kind of data did the hackers steal?
The hackers claim to have stolen over 740,000 data points, including contact details like names, email addresses, and phone numbers for parents, staff, and police officers. This also includes work emails and some public service users' names and addresses.
+How much are the hackers demanding to stop the data release?
The article does not specify the exact amount demanded by ExfilSquad for payment. However, the hackers have indicated that the requested payment is considered minor compared to potential litigation costs if the data is released.
+Did the breaches involve confidential information?
No, both the Department for Education and the Police National Legal Database state that no confidential data, such as victim or offender details, was accessed. The DfE confirmed only customer service contact details were taken.
+What are the next steps following the data breaches?
The affected organisations have reported the incidents to the Information Commissioner's Office. The government is working with the National Cyber Security Centre and the National Crime Agency to investigate the DfE hack, though it remains unclear if ransomware was used.
Barnet Press News Desk
This article was written at the Barnet Press news desk from the reporting of the outlets listed below it. Drafting is done by a language model under human editorial supervision — there is no reporter behind this byline, and we would rather say so than invent one.
How stories are produced and scoredWho runs Barnet PressCorrections
Barnet conditions
Loading live conditions…
More Coverage in World
Sunseeker Holiday Homes enters administration
Enfield Town Liveable Neighbourhood scheme paused pending review
