A major cyberattack targeting UK government systems has resulted in the theft of more than 740,000 records from the Department for Education (DfE) and a police database, raising fresh concerns about the security of public-sector digital infrastructure. According to reports, the attack was carried out by a hacking group known as “ExfilSquad,” which claims to have accessed and extracted sensitive information from both organizations.
What Happened?
The breach affected two key systems:
- The UK Department for Education’s help-desk and Turing Scheme portals.
- The Police National Legal Database (PNLD), a platform used by law enforcement agencies.
Hackers reportedly stole more than 600,000 records from the Department for Education and approximately 135,000 records from the police database. The compromised information includes names, job titles, email addresses, phone numbers, organizational details, and other contact information belonging to teachers, school leaders, university staff, government officials, police personnel, and members of the public.
What Data Was Exposed?
Authorities have stated that highly sensitive criminal records, victim information, and core government systems were not accessed. However, the exposure of contact information, passwords, and communications submitted through public-facing portals still presents significant risks. Cybersecurity experts warn that such data can be used in phishing campaigns, identity theft attempts, and social engineering attacks.
The hacking group has reportedly published sample data online and is demanding payment in exchange for not releasing the remaining information. Investigators have verified that the leaked data appears to be genuine.
Government Response
Following the discovery of the breach, affected systems were taken offline while investigations began. The Department for Education is working with the UK’s National Crime Agency (NCA), National Cyber Security Centre (NCSC), and the Information Commissioner’s Office (ICO) to determine the full scope of the incident and strengthen security measures.
Officials have emphasized that the breach was limited to customer-service and contact-related information and that there is currently no evidence of deeper access into core government databases.
Why This Matters
The attack highlights the growing cybersecurity challenges facing governments worldwide. Public-sector organizations hold vast amounts of personal and operational data, making them attractive targets for cybercriminal groups seeking financial gain, disruption, or reputational damage.
Recent reports show a significant rise in cyber incidents affecting UK institutions, with government agencies, transportation networks, educational organizations, and healthcare providers increasingly becoming targets of sophisticated attacks.
Key Takeaways
- Over 740,000 records were reportedly stolen from UK education and police systems.
- The Department for Education and Police National Legal Database were both affected.
- Contact information, emails, phone numbers, and passwords were exposed.
- No evidence currently suggests that highly sensitive criminal or victim records were accessed.
- UK authorities have launched investigations and are working with cybersecurity agencies to contain the threat.
- The incident underscores the growing cybersecurity risks facing public institutions worldwide.
