UK police data compromised via third‑party suppliers, inspectorate reports

The Inspectorate of Constabulary and Fire & Rescue Services has released a report confirming that British police data has been breached on several occasions over the past decade through the computer systems of external IT suppliers.

According to the findings, hackers succeeded in penetrating the networks of multiple third‑party providers that host records for police forces across England, Wales and Scotland. The incidents were uncovered during routine investigations into cyber incidents affecting public‑sector organisations.

The report emphasises that these were not isolated events. Repeated intrusions into different suppliers point to systemic weaknesses in the supply‑chain security model that many police forces rely on for data storage and processing.

Information accessed in the breaches includes personal details of suspects, victims, witnesses and serving officers. While the inspectorate did not disclose the exact volume of data compromised, it warned that exposure of such sensitive material could undermine public confidence and endanger individuals involved in ongoing investigations.

To address the problem, the watchdog recommends that police forces tighten vetting procedures for contractors, adopt stricter cybersecurity standards, and conduct regular, independent audits of supplier systems. It also calls for clearer accountability arrangements between forces and their service providers.

The revelations come as the Home Office and other government bodies are debating new regulations aimed at bolstering cyber resilience across the public sector. Police authorities may soon be required to reassess existing contracts, invest in stronger in‑house capabilities, and allocate additional resources to protect the data they hold on behalf of the public.