UK Department for Education says extortionists stole data from two education portals, with linked exposure at Police National Legal Database

Cyber extortionists say they stole data from the UK Department for Education and are demanding payment not to release it. The Department for Education said two systems were affected: the DfE Help Desk Self-Service Portal and the Turing Scheme Portal, with the stolen information limited to customer-service contact details; the same report also says the Police National Legal Database was separately impacted, exposing names, police forces, and work email addresses tied to about 135,000 data records. No encryption or ransomware deployment was reported.
Why it matters: This is a public-sector data theft and extortion case affecting government services and potentially police personnel contact data. Affected organizations should investigate access paths, notify impacted users as needed, and watch for follow-on phishing or impersonation using the stolen contact information.

Sources

ExfilSquad hackers leak info of over 100,000 UK police officers, staff
Bill Toulas 2026.08.03 91% relevant
This article updates the same Police National Legal Database breach by adding that ExfilSquad claimed responsibility, published sample data, and that PNLD says names, organizations, and email addresses of more than 100,000 police officers, staff, criminal justice professionals, government partners, and Ask the Police users were exposed.
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
info@thehackernews.com (The Hacker News) 2026.08.03 95% relevant
This article appears to be a direct update on the same PNLD exposure referenced in the tracked Department for Education story, adding that police and government contact details were found on the dark web and clarifying the sensitivity of the leaked PNLD data.
In Other News: OpenAI Open Source Tool, AWS Links Hacks to North Korea, Mythos Crypto Research
SecurityWeek News 2026.07.31 95% relevant
This source adds that roughly 607,000 Department for Education records were taken and that the exposed data consisted of phone numbers and email addresses, with the department saying the risk to individuals is not considered high.
Cyber extortionists steal data from UK Department for Education
2026.07.30 100% relevant
This article appears to be the first concrete report in the set about ExfilSquad's claimed theft and extortion involving the Department for Education and the Police National Legal Database.
← Back to all stories