ExfilSquad Exposes 100k Police Records via UK Government Portals

A hack has resulted in the leak of full names and contact details of over 100,000 police officers and staff on the dark web, involving the Ministry of Defence, Home Office, National Crime Agency, and Crown Prosecution Service. This follows another breach where the Department for Education compromised more than half a million data points. A cybercriminal group called ExfilSquad is behind the attacks, having recently targeted multiple western entities. They claim that the breaches are due to misconfigurations in Microsoft Power Apps/Dynamics 365.