Met police on high alert after ‘staggering IT security’ breach | Metropolitan police

The Metropolitan police is on high alert after a security breach involving the IT system of one of its suppliers, the force said.

Scotland Yard is working with the company to understand the scale of the incident but said on Saturday evening that any leaked data could do “incalculable damage” in the wrong hands.

A spokesperson for the Metropolitan police said any potential leak “will cause colleagues incredible concern and anger”.

The company in question had access to names, ranks, photos, vetting levels and pay numbers for officers and staff, but did not hold personal information such as addresses, phone numbers or financial details, the force said.

A spokesperson for the force was unable to say when the breach occurred or how many personnel might be affected.

Rick Prior, vice-chair of the force said: “Metropolitan police officers are – as we speak – out on the streets of London undertaking some of the most difficult and dangerous roles imaginable to catch criminals and keep the public safe.

“To have their personal details potentially leaked out into the public domain in this manner – for all to possibly see – will cause colleagues incredible concern and anger.

“We share that sense of fury … this is a staggering security breach that should never have happened.”

He added: “Given the roles we ask our colleagues to undertake, significant safeguards and checks and balances should have been in place to protect this valuable personal information which, if in the wrong hands, could do incalculable damage.

“The men and women I represent are justifiably disgusted by this breach. We will be working with the force to mitigate the dangers and risks that this disclosure could have on our colleagues. And will be holding the Metropolitan police to account for what has happened.

“Our brave police officers – who give up so much to do this job – deserve so much better.”

The Met has taken “security measures” as a result and the matter has been reported to the National Crime Agency, while the Information Commissioner’s Office (ICO) is also aware.

It follows an admission by the Police Service of Northern Ireland (PSNI) that personal data on all its serving members was mistakenly published in response to a freedom of information (FoI) request.

Details of about 10,000 PSNI officers and staff included the surname and first initial of every employee, their rank or grade, where they are based and the unit they work in.

After the PSNI breach was revealed, Norfolk and Suffolk constabulary announced the personal data of more than 1,000 people – including crime victims – was included in another FoI response.

On Wednesday, South Yorkshire police referred itself to the ICO after noticing “a significant and unexplained reduction in data stored on its systems”.

The force said it was now urgently working with experts to recover footage filmed by officers as they attended incidents or engaged with the public that, in some cases, could be used as evidence in court.