Staff details leaked in British Transport Police website hack

Attackers steal personal information after taking down the website’s newsroom section

The news section on the British Transport Police's website

The email addresses and phone numbers of British Transport Police (BTP) staff have been leaked after hackers compromised the newsroom section of the police force's website.

The BTP confirmed it was recently "made aware of a cyber security threat" to its website, which is hosted by an external supplier, and have entirely suspended its newsroom section as a precaution. This has been replaced with a Tumblr feed while investigations ensue.

Advertisement - Article continues below

Although BTP did not provide a timeline of the attack, the earliest post on this makeshift news feed dates back to Monday 13 May, with the rest of its archive appearing blank.

"The Force has worked closely with the National Cyber Security Centre, the National Crime Agency and the external supplier to understand the nature of the threat and if there has been any compromises," a spokesperson said.

"This system has no affiliation with the Force's crime management or command and control systems and has not compromised the Force's operational capabilities. All the relevant authorities have been notified of this incident.

"BTP is supporting an ongoing investigation being coordinated by the National Crime Agency and the National Cyber Security Centre and is working to restore the latest news section as soon as possible."

Advertisement
Advertisement - Article continues below

Although the hack was first thought to have targeted just the news section, early investigations have revealed a "small number" of employee's BTP emails and telephone numbers were exposed.

Advertisement - Article continues below

The National Cyber Security Centre (NCSC) told IT Pro its staff are aware of a cyber incident affecting the BTP and are working with them and law enforcement partners to advise on measures to mitigate the effects.

The NCSC also corroborated the BTP's claim that the incident only affected its newsroom section, and posed no threat to either its crime or command and control systems.

IT Pro approached the Information Commissioner's Office (ICO), which confirmed it will assess information around the hack provided by the BTP.

It is not yet clear whether hackers had specifically targeted BTP, or whether its supplier had been caught up in a non-targeted cyber attack.

But malicious actors previously did strike the computer systems of the Police Federation of England and Wales (PFEW) earlier this year in what appeared to be a random cyber attack.

The association body representing near-120,000 police officers was able to contain the attack to just its Surrey headquarters and prevent it from spreading to its 43 individual branches across the country.

Featured Resources

Top 5 challenges of migrating applications to the cloud

Explore how VMware Cloud on AWS helps to address common cloud migration challenges

Download now

3 reasons why now is the time to rethink your network

Changing requirements call for new solutions

Download now

All-flash buyer’s guide

Tips for evaluating Solid-State Arrays

Download now

Enabling enterprise machine and deep learning with intelligent storage

The power of AI can only be realised through efficient and performant delivery of data

Download now
Advertisement

Recommended

Visit/security/355013/10-quick-tips-to-identifying-phishing-emails
Security

10 quick tips to identifying phishing emails

16 Mar 2020
Visit/business-strategy/mergers-and-acquisitions/354941/panda-security-to-be-acquired-by-watchguard
mergers and acquisitions

Panda Security to be acquired by WatchGuard

9 Mar 2020
Visit/security/internet-security/354417/avast-and-avg-extensions-pulled-from-chrome
internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019
Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Visit/software/video-conferencing/355138/zoom-beaming-ios-user-data-to-facebook-for-targeted-ads
video conferencing

Zoom beams iOS user data to Facebook for targeted ads

27 Mar 2020
Visit/infrastructure/server-storage/355118/hpe-warns-of-critical-bug-that-destroys-ssds-after-40000-hours
Server & storage

HPE warns of 'critical' bug that destroys SSDs after 40,000 hours

26 Mar 2020
Visit/software/355113/companies-offering-free-software-to-fight-covid-19
Software

These are the companies offering free software during the coronavirus crisis

25 Mar 2020
Visit/mobile/mobile-phones/355088/apple-lifts-iphone-purchase-restrictions
Mobile Phones

Apple lifts iPhone purchase restrictions

23 Mar 2020