Metropolitan Police personnel names and photos stolen by hackers

The Metropolitan Police, responsible for law enforcement within Greater London are currently dealing with a significant security breach that puts officers' personal information at risk. Hackers have breached the IT systems of a contractor responsible for printing warrant cards and staff passes, resulting in the theft of potentially sensitive data. This has prompted the force to inform its 47,000 personnel about the data leak.

Alongside officers' names and photographs, there are concerns that hackers have gained access to vetting levels and ID numbers. Authorities worry that the stolen information might be misused by terrorists or organized criminal groups.

Metropolitan Police has acknowledged the breach, stating that unauthorized access to the IT system of a supplier for the Met had occurred.

The supplier had access to officers'

• names,
• ranks,
• photos,
• vetting levels,
• pay numbers.

However, the company did not store other sensitive personal information like addresses, phone numbers, or financial data.

Update - on 5th September the third party supplier involved in the data breach was identified. It's Stockport-based Digital ID, specializing in supplying printers and systems for ID cards and access passes. Digital ID primarily serves clients with on-site printing needs, offering printers, blank cards, and accessories like lanyards. Digital ID has reported an IT security incident and is currently undergoing an investigation with external cyber and forensic consultants.

Former Metropolitan Police commander has pointed out that the leaked information could be exploited to forge warrant cards or passes, potentially granting unauthorized access to police facilities. He has also highlighted the distressing possibility that photographs of undercover officers or those involved in sensitive operations like counter-terrorism could fall into the wrong hands, jeopardizing their safety.