Zero Radar
← feed
HighData breachupdated 27 Oct 2026, 15:14 UTC

Hackers repeatedly breached IT suppliers holding UK police data

Companies that provide IT services to UK police forces were hacked several times, and police data held by those companies may have been exposed. Attackers got in through the suppliers rather than directly through police systems.

Attacks reported (The Record)1 source, unconfirmed
SeverityHighData breach
Being exploited?ReportedBy The Record, not officially confirmed yet
What to doCheck exposureAudit every third-party IT supplier that holds police data and verify their security controls.
How sure is this?1 source, unconfirmedOnly one publisher so far, details may change

How the attack works simplified

  1. 1HackersTarget outside IT suppliers, not police directly
  2. 2Supplier systemsContractor holding police data is breached
  3. 3Police dataSensitive records accessed through supplier
  4. ResultPolice data exposed via suppliers

What happened

A UK watchdog (His Majesty's Inspectorate of Constabulary and Fire & Rescue Services) reports that British police data was breached several times this decade through third-party IT suppliers.

Why it is dangerous: Sensitive police data held by outside contractors was accessed by hackers, putting police information and the people it describes at risk. Police forces relying on these suppliers are exposed.

Are you affected?

You are affected if your organisation, or the police data you hold, depends on third-party IT suppliers that handle UK police data.

What to do

  1. Review which third-party IT suppliers hold or access police data and confirm their security controls
  2. Require suppliers to report breaches promptly and to meet agreed security standards
  3. Limit supplier access to only the data and systems they need

Timeline

  1. 27 Oct 2026, 15:07 UTC
    Publicly disclosed
  2. 27 Oct 2026, 15:07 UTC
    Reported by The Record · The Record
  3. 27 Oct 2026, 15:14 UTC
    Picked up by Zero Radar

Sources 1 report, oldest first

Security press established security newsrooms

Technical details

ID
ZR-37ead5af
Disclosed
27 Oct 2026, 15:07 UTC
On Zero Radar
27 Oct 2026, 15:14 UTC (8 min after disclosure)
Last change
27 Oct 2026, 15:14 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Hackers repeatedly breached IT suppliers holding UK police data · Zero Radar