Welsh Police Force Hit by Cyberattack, Staff Data Potentially Compromised
Dyfed-Powys Police in Wales is investigating a cyberattack that disrupted non-emergency systems and may have compromised employee information.

Dyfed-Powys Police, a law enforcement agency serving southwest Wales, has confirmed it experienced a significant cyberattack earlier this month. The incident led to disruptions in some of the force's non-emergency systems, impacting daily operations. While the investigation is ongoing, the police have stated that there is currently no evidence to suggest that any data belonging to members of the public has been affected.
However, the scope of the breach may extend to sensitive employee information. A spokesperson for the force indicated that investigations are actively underway to determine whether any data pertaining to its more than 2,000 officers and staff was accessed or compromised during the incident. The exact nature of the potential staff data compromise remains unclear.
The Tarian, the regional organized crime unit for southern Wales, has taken the lead in investigating the cyberattack. They are receiving support from specialized cybersecurity experts to thoroughly examine the incident, identify the attack vector, and assess the full extent of the damage. Details regarding how the breach occurred or the specific types of staff data involved have not yet been disclosed.
As of the time of reporting, no threat actor or cybercriminal group has claimed responsibility for the attack. This lack of attribution leaves the motive and origin of the cyber incident uncertain, adding to the complexity of the ongoing investigation.
In response to the incident, Dyfed-Powys Police emphasized that they understand the potential concern such an event can cause. The force is implementing measures to safeguard its information and systems, aiming to prevent further unauthorized access and mitigate any ongoing risks. They have committed to providing further updates as more information becomes available through their investigation.
The incident highlights the persistent threat of cyberattacks against public sector organizations, including law enforcement agencies. The potential compromise of staff data raises concerns about privacy and security for employees, underscoring the critical need for robust cybersecurity defenses and incident response capabilities within such institutions.