Cyber-attack Leads to Hacking of Greater Manchester Police Officers’ Data

Morgan Phisher October 2, 2023

Well, bring on the fog and brace yourself for some unusual weather drama on the digital front. Word is that cyber bandits have swooped in and potentially stolen personal details of thousands of public sector employees, as two of the UK’s largest police forces have come under fire. You think fog is tricky in the Bay Area? Try navigating a large-scale ransomware attack!

What’s more, these are no small-town precincts. We’re talking Diamond Heights-style skyscrapers. Over 12,500 officers and staff from the Greater Manchester Police, as well as their counterparts from the Metropolitan Police, have been warned that their personal intel has been compromised.

Ohana, this isn’t just about email addresses and phone numbers. It’s the big potatoes; names, ranks, photos, even serial numbers on the officers’ badges might have been snatched. Can you imagine the potential fallout?

As you might expect, the folks at the National Crime Agency aren’t too thrilled about this. They’ve got their knuckles to the grindstone trying to dig into this breach at Digital ID, the Stockport-based firm in question. Their concerns expand not just to police, but also to other organizations that rely on Digital ID’s services, including some esteemed names in healthcare and academia. This underlines the interconnectedness of digital infrastructure – a stark reminder for everyone, including us here in the heart of the tech world.

Consider Toby Lewis, a cybersecurity whizz who used to work with the National Cyber Security Centre. Toby thinks it’s likely that pretty much every organization who ever ordered a lanyard from Digital ID is affected. Not something you want to hear, right?

But this story doesn’t stop here. These hackers, if nothing else, are thorough. Toby reckons they’ve likely infiltrated the full gamut of Digital ID’s customer database. Roughly speaking, we are potentially talking tens of thousands of people who might have been compromised. Hefty stuff, huh?

Of course, we trust all the affected organizations to get proactive. The Golden State Warriors wouldn’t sit back and hope for the best in the face of adversity. We presume everyone is hustling to figure out the extent of the attack and take necessary security measures.

What is concerning is the sensitive nature of the roles that many of these affected individuals hold. It’s enough to give a data protection officer major heartburn. Are there protocols in place for such incidents of breaches in policing? And perhaps most critically, how can they keep the officers safe from potential harm due to the exposure of their personal details?

Greater Manchester Police, who already have a tough job keeping the peace, are left fielding questions about why they waited almost three weeks to disclose the incident to their staff. An email notification to employees highlighted the risk that names, ranks, pictures and serial numbers might have been accessed.

The attack is a chilling reminder of not just the sophisticated tactics employed by cybercriminals but also the treasure trove of information that’s available at an organizational level. Any identifiable police data stolen in such attacks can enable identity theft, impersonation of officers, and disruption of investigations. Quite the Pandora’s Box, isn’t it?

So, folks in healthcare and cybersecurity, this twisted adventure in the world of digital identity theft is a stark reminder of the importance of resilient defenses in our tech-heavy world. The moral of the story? Tighter protocols and reinforced cybersecurity measures are the need of the hour. We need to put our Bay Area brains together and protect not just our online identities, but the critical work we do across sectors.

by Morgan Phisher