# UK Police Data at Risk: Suppliers Targeted in Repeated Cyberattacks

*Published October 28, 2026*
*Source: [https://therecord.media/uk-police-data-breached-from-suppliers-watchdog-report](https://therecord.media/uk-police-data-breached-from-suppliers-watchdog-report)*

## Executive Summary

A report by His Majesty’s Inspectorate reveals that since 2021, third-party suppliers holding British police data have repeatedly been targeted by hackers. This situation poses a significant and expanding cyber threat, highlighting the urgent need for improved cybersecurity measures and oversight.

## Article

Since 2021, hackers have repeatedly targeted third-party suppliers holding sensitive British police data, as revealed in a report by His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services. The oversight body, responsible for policing in England and Wales and fire services in England, highlighted multiple cyberattacks on third-party ICT supply chains that manage police information. However, the report does not specify the number of attacks, the suppliers or forces involved, or if any data was stolen. The Police Digital Service reported 252 cybersecurity incidents affecting policing in the first quarter of this year alone, alongside 796 near misses, incidents that did not result in harmful data or IT system breaches. These incidents included malware attacks, unauthorized access attempts, and accidental disclosures. The report criticizes the lack of ongoing cybersecurity assurance in most police supplier contracts, with some contracts lacking clear incident reporting obligations and visibility of system logs to in-house teams. The inspectorate also expressed concern over the exclusion of policing and fire services from key government cybersecurity plans, noting the significant and expanding cyber threat to these sectors. Recent incidents, such as the ransomware attack on ID card maker Digital ID and the breach of the Police National Legal Database, underscore the urgent need for enhanced cybersecurity measures. Michelle Skeer, His Majesty’s Inspector of Constabulary, emphasized that a major cyberattack is not just a possibility but a growing threat.