Greater Manchester Police officers’ details hacked after partner firm targeted in cyber attack

A ransomware attack on Digital ID, a Stockport-based supplier of identity and access cards, has resulted in data breaches affecting Greater Manchester Police (GMP) and London’s Metropolitan Police forces.

The firm in Stockport, which makes ID cards, holds information on various UK organisations including some of the staff employed by Greater Manchester Police (GMP). Compromised data affected includes personal information on more than 12,500 officers and staff such as details of serving officers’ warrant cards, names, ranks, photos and serial numbers.

The hack means thousands of police officers’ names are at risk of being placed in the public domain.

GMP assistant chief constable, Colin McFarlane, said: “We are aware of a ransomware attack affecting a third-party supplier of various UK organisations, including GMP, which holds some information on those employed by GMP. At this stage, it’s not believed this data includes financial information. We understand how concerning this is for our employees so, as we work to understand any impact on GMP, we have contacted the Information Commissioners Office [ICO] and are doing everything we can to ensure employees are kept informed, their questions are answered and they feel supported. This is being treated extremely seriously, with a nationally led criminal investigation into the attack.”

Last month, the Metropolitan Police was also put on alert after a similar security breach involving one of its suppliers. The National Crime Agency confirmed it was leading the investigation for both.