Hackers Claim Data Theft from UK Education and Police
A group named ExfilSquad alleges the compromise of sensitive contact details from government and law enforcement systems.
Trust 55Craft 65Hype 35How this was reported ▾
Only one named source and no direct document quotes.
How well corroborated and evidenced the reporting is. Higher is better.
Clear separation of fact and comment, but lacks affected voices.
Context, balance and separation of fact from comment. Higher is better.
Headline overstates severity with 'sensitive data' claim.
How far presentation runs ahead of substance. Lower is better.
1 source assessed · methodology
A previously unknown hacking collective, ExfilSquad, has claimed responsibility for cyber-attacks against the UK's Department for Education (DfE) and a police database. The group alleges it has stolen more than 740,000 pieces of data in total. ExfilSquad has posted samples of the compromised information on a leak site, a common tactic used by cybercriminals to solicit payment.
Data Compromised
Sea View Homes See 27% Value Surge
Properties with coastal vistas have outpaced the national average increase in value since 2019.
According to ExfilSquad's claims, the DfE's help-desk portal had approximately 600,000 lines of data extracted. This data reportedly includes full names, email addresses, and phone numbers belonging to parents and staff. A smaller quantity of similar data was also allegedly taken from the department's Turing portal, which manages a scheme for students studying abroad.
The hackers also claim to have breached the Police National Legal Database (PNLD), a resource used by UK police forces for legal assistance. ExfilSquad stated that 135,000 pieces of data were taken from the PNLD. This information is understood to include the names, employing organisations, and work email addresses of police officers and criminal justice personnel. Some names and addresses of members of the public who had previously used the 'Ask the Police' service were also reportedly accessed.
Demands and Official Statements
Parents to Spend 88 Hours Scrolling This Summer
Survey reveals children feel parents miss family moments due to phone use, with many parents lacking control over their habits.
ExfilSquad is demanding an unspecified payment from both the DfE and the PNLD. The group has indicated that all stolen data will be uploaded if the requested payment is not made. Screen grabs of messages seen by The Guardian suggest the hackers view the payment as a minor cost compared to potential litigation expenses if the data is released.
The Department for Education has stated that the information accessed was limited to customer service contact details for individuals and organisations. The DfE has asserted that no other data was breached. Similarly, the PNLD has confirmed that the hack did not involve confidential information relating to victims, witnesses, or offenders.
Cybersecurity company Sophos, which reviewed screenshots of the data samples posted by the hackers, indicated that the samples appeared legitimate. The PNLD has also reported that passwords used to access the site were among the stolen data, raising concerns about potential reuse on other systems.
Next Steps
The DfE and the PNLD have reported the incidents to the Information Commissioner's Office, the UK's data protection regulator. The government has stated it is collaborating with the National Cyber Security Centre and the National Crime Agency to investigate the DfE hack. It remains unclear if ransomware was deployed in the attacks.
Barnet Press News Desk
This article was written at the Barnet Press news desk from the reporting of the outlets listed below it. Drafting is done by a language model under human editorial supervision — there is no reporter behind this byline, and we would rather say so than invent one.
How stories are produced and scoredWho runs Barnet PressCorrections
More Coverage in World
Sea View Homes See 27% Value Surge
Parents to Spend 88 Hours Scrolling This Summer
Food Shock Warning Issued by 100 UK Organisations
