PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web. The data included names, organisations and work email addresses belonging to police officers, police staff, criminal justice professionals, government partners and customers. The incident, identified on July 26, also exposed some names

The article reports that the Police National Legal Database (PNLD) confirmed a breach in which contact information (names, organisations, and work email addresses) of police officers, justice professionals, government partners, and customers was exfiltrated and published on the dark web, along with some data from public users of the Ask the Police service.[2][8] PNLD stated there is no evidence that passwords or other security credentials were compromised and that its systems do not store victim, witness, or offender records.[2] From a RealGround perspective, although the exposed fields are "just" contact details, they materially increase the risk of highly targeted phishing, social engineering, and impersonation attacks against law enforcement and government users, which can in turn be leveraged to compromise AI-enabled services or data pipelines that rely on these identities. This incident highlights the need for organizations to harden low-code/no-code platforms such as Microsoft Power Platform from misconfigurations, inventory and monitor AI-adjacent SaaS components in their supply chain, and run continuous red teaming and readiness assessments to detect and mitigate abuse scen