Greater Manchester Police officers’ details stolen in cyber attack
Thousands of officers and staff may have had data stolen.
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.An investigation is underway after details of thousands of Greater Manchester Police officers and staff were hacked, the force has said.
Details on identity badges and warrant cards, including names, photos of individuals and identity numbers or police collar numbers, were stolen in a ransomware attack on the force’s supplier of ID badges.
Assistant Chief Constable Colin McFarlane of GMP said: “We are aware of a ransomware attack affecting a third-party supplier of various UK organisations, including GMP, which holds some information on those employed by GMP.
“At this stage, it’s not believed this data includes financial information.”
This is being treated extremely seriously, with a nationally-led criminal investigation into the attack
He added: “We understand how concerning this is for our employees so, as we work to understand any impact on GMP, we have contacted the Information Commissioners Office and are doing everything we can to ensure employees are kept informed, their questions are answered, and they feel supported.
“This is being treated extremely seriously, with a nationally-led criminal investigation into the attack.”
GMP said no home addresses of officers or any financial information about individuals had been stolen in the hack.
The force, like many others, uses covert officers and has a sizeable counter-terror unit.
An internal GMP staff email issued on Wednesday, according to the Manchester Evening News, said there is no indication any GMP data has been put online or shared any further.
Last month the Metropolitan Police was also put on alert after a similar security breach involving one of its suppliers.
GMP said the National Crime Agency is leading on the investigation into the ransomware hack.
The National Crime Agency is leading the criminal investigation into a cyber incident affecting a company which supplies ID card services to a number of UK organisations
Mike Peake, chair of Greater Manchester Police Federation, said: “Our colleagues are undertaking some of the most difficult and dangerous roles imaginable to catch criminals and keep the public safe.
“To have any personal details potentially leaked out into the public domain in this manner – for all to possibly see – will understandably cause many officers concern and anxiety.
“We are working with the force to mitigate the dangers and risks that this breach could have on our colleagues.”
The National Crime Agency (NCA) confirmed they are investigating the hack of GMP along with the same attack on the Met Police.
Organisations must look after employee information, particularly in sectors where the impact of a data breach could be greater
A spokesman said: “The National Crime Agency is leading the criminal investigation into a cyber incident affecting a company which supplies ID card services to a number of UK organisations.
“We are working alongside the NCSC and law enforcement partners to fully understand the impact of the incident and support those organisations whose data has been accessed.”
Elizabeth Baxter, head of cyber investigations at the Information Commissioner’s Office (ICO), said: “Police officers and staff expect their information to be kept secure, and are right to be concerned when that doesn’t happen.
“This incident has been reported to us, and we’ll now be looking into what happened, and asking questions on behalf of anyone affected.
“Organisations must look after employee information, particularly in sectors where the impact of a data breach could be greater. The ICO works to support organisations to get this right so people can feel confident that their information is secure.”