黑客组织ExfilSquad对英国教育部和警察数据库发动网络攻击，窃取超过74万条数据[1]。其中约60万条数据来自教育部帮助台门户网站，包含政府官员、学校领导、大学员工和警察的个人信息[1]；另有13.5万条数据来自英国警察国家法律数据库[1]。
教育部随后发布声明称已"采取迅速行动遏制事件"，并表示"涉及的信息仅限于客户服务联系方式"[1]。然而知情人士对此提出安全隐患，指出"风险程度低。问题是，如果你用PNLD密码，是否会在更敏感的系统中使用它？"[1]
黑客团伙要求支付未指定金额的赎金，否则将上传全部窃取数据[1]。黑客在勒索信中声称"你要求的报酬与你数据泄露的诉讼成本相比只是个舍入误差。聪明点，直接付钱"[1]。
A cybercriminal group known as ExfilSquad has breached databases belonging to the UK Department for Education and police, compromising over 740,000 records in total [1]. Approximately 600,000 of these records were stolen from the Department for Education's helpdesk portal, containing personal information of government officials, school leaders, university staff, and police officers [1]. An additional 135,000 records were taken from the National Law Database used by UK police forces [1].
The Department for Education stated that it had "taken swift action to contain the incident," asserting that "the information involved was limited to customer service contact details" [1]. However, an insider cautioned about potential risks, stating: "The risk level is low. The question is, if you use PNLD passwords, are you using them on more sensitive systems?" [1]
The attackers have demanded an unspecified ransom, threatening to upload all stolen data if payment is not made [1]. In their message to the targeted organizations, the hackers stated: "The compensation you are asking for is just a rounding error compared to the litigation costs of your data breach. Be smart, pay now" [1].