Welsh Police Force Reports Cyberattack Disrupting Non-Emergency Services and Potentially Exposing Staff Data

Dyfed-Powys Police announced on Thursday that a cyberattack has interfered with several of its non‑emergency digital services and may have resulted in the exposure of personal information belonging to its employees.

The intrusion appears to have targeted systems used for routine administrative tasks, such as online reporting forms and internal communications platforms. As a result, some community‑based services were temporarily unavailable, prompting the force to revert to manual processes while technical teams work to restore full functionality.

A spokesperson for the force confirmed that the incident is being investigated in collaboration with the National Cyber Security Centre and other specialist agencies. While the investigation is ongoing, the police department has not identified any immediate threat to public safety or ongoing criminal investigations.

Cyber threats against law‑enforcement bodies have risen sharply in recent years, with agencies across the United Kingdom and Europe reporting similar breaches that range from ransomware attacks to data exfiltration attempts. The increasing reliance on digital tools for everyday policing makes these organizations attractive targets for malicious actors seeking to disrupt operations or harvest sensitive information.

The potential compromise of staff data has raised concerns about identity theft and other privacy risks for employees. The police force has begun notifying affected personnel and is offering guidance on steps to protect personal accounts, including password resets and monitoring for suspicious activity.

Dyfed-Powys Police emphasized that it will continue to provide updates as the technical and forensic analyses progress. In the meantime, the department is urging the public to use alternative contact methods for non‑emergency matters and reassuring residents that emergency response capabilities remain fully operational.