The Hacker News30%
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web 8%
By Swati Khandelwal21%
8/3/2026, 2:13:00 AM
BS Summary: This article contains 17 faulty reasoning types, including Appeal to Authority, Pessimism Bias, and Burden of Proof, with Confirmation Bias as the most egregious example at 10.4% saturation with 66 hits. Analysis detected 472 faulty-reasoning hits from 637 analyzed words, generating a BS Score of 19.1% and a BS Rank of 8% (24,701 of 26,774 articles). This article is better (less manipulative) than 92.30% of the article peer group.
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.
The data included names, organisations and work email addresses belonging to police officers, police staff, criminal justice professionals, government partners and customers.
The incident, identified on July 26, also exposed some names and email addresses belonging to people who had submitted questions through Ask the Police.
That exposure could make phishing messages targeting named officers appear more convincing, according to UK government guidance.
PNLD said, "There is no evidence to suggest that passwords or other security credentials have been compromised."
The service provides legal information, products and services to UK police forces and criminal justice organisations.
It is not the Police National Computer or the Police National Database, is not a crime-recording system, and does not hold confidential information about victims, witnesses or offenders.
PNLD says it contacted all affected organisations and provided them with further information and guidance.
Affected Ask the Police users have already received an email with more information and guidance.
It notified the Information Commissioner's Office (ICO) and is working with the National Crime Agency (NCA) and specialist cybersecurity organisations.
As of August 3, 2026, it had not publicly disclosed how many people were affected, when the intrusion began, how long access lasted, or how much information was taken.
PNLD's official breach notice describes the exposed fields but provides no victim total.
PNLD reported 108,429 police registrations and support for all 43 Home Office police forces in its 2025-26 annual summary.
That is a user-base figure, not a breach-victim count.
PNLD said in its 2023-24 annual summary that the database uses Microsoft Power Platform technology.
The Hacker News confirmed on August 3, 2026, that the breach-notice page referenced assets hosted on Microsoft's content.powerapps.com domain.
That corroborates the platform connection but does not show how the attacker obtained the data.
VenariX reviewed samples associated with 11 of ExfilSquad's 15 claimed victims and found Dataverse-consistent structures across all 11.
In the Houston case, it confirmed that a public portal returned records without authentication and that those records were consistent with data published by the group.
VenariX assessed the likely campaign-level path as a public Power Pages site with broad Anonymous Users access to Dataverse tables.
The path also required an enabled Power Pages Web API or legacy OData feed.
Microsoft's documentation says granting the Anonymous Users role access to a table makes its data visible to anyone visiting the site.
Its Web API documentation says the /_api interface follows the table permissions attached to each web role.
VenariX said the evidence "does not yet confirm that every organization was affected through an exposed Power Apps portal or the same configuration issue."
As of August 3, 2026, neither PNLD's notice nor VenariX's report identified a PNLD-specific endpoint, permission setting, API route, or supporting log.
At this stage, the Power Pages link remains a hypothesis to test rather than an explanation of the PNLD breach.
Microsoft provides a tenant-level governance control that blocks unauthenticated users from reading Dataverse data while still allowing public form submissions.
VenariX recommends that Power Pages operators also review Anonymous Users table permissions, Web API settings, and legacy OData feeds, then validate access from an unauthenticated browser session.
Those measures address the configuration pattern identified by VenariX, not a confirmed PNLD root cause.
ExfilSquad listed PNLD on its leak site on July 26, but PNLD has not attributed the incident to the group.
VenariX found no evidence of ransomware deployment, malware use, lateral movement or exploitation of a software vulnerability in the campaign material it examined.
PNLD has not publicly disclosed the exact access route, the number of unique people affected or the full volume of data published.
Speakers
4speakers20%attributed speech509writer words
Selected voice
100%flagged-word coveragePNLD
17 attributed words13% of attributed speech47% writer coverage
Attribution is sentence-level. Pattern percentages are calculated only from words assigned to that voice.
Loading…
Loading…
Loading…
Loading…
Analysis
Hover over highlighted words in the article to view the associated bias or fallacy analysis.