Personal details of police officers in Greater Manchester have been hacked after a private company making ID cards for organisations was hit by a cyber-attack.
Hackers have targeted Stockport-based Digital ID, specialising in supplying printers & systems for the production of ID cards & access passes. Greater Manchester Police (GMP) is one of the firm’s clients.
The ransomware attack has now been confirmed.
3rd-Party Supplier
“We are aware of a ransomware attack affecting a 3rd-party supplier of various UK organisations, including GMP, which holds some information on those employed by GMP,” said Assistant Chief Constable Colin McFarlane.
He added that the police understood how serious the matter was but stressed: “At this stage, it’s not believed this data includes financial information.”
The Sun reported earlier this month that the attack came after warrant cards & passes were introduced under a scheme, codenamed ‘Operation Fortress,’ to improve security.
Ransom Demand
The head of Digital ID was allegedly sent a ransom demand by crooks from an overseas server in Aug. The Sun also said the home addresses of 100s of police officers were suspected to have gotten into the hands of computer hackers.
What is really concerning is that identities of undercover police officers could also now be exposed. McFarlane cautioned: “This is being treated extremely seriously, with a nationally led criminal investigation into the attack.”
Digital ID mostly provides customers with printers, blank cards, & accessories like lanyards, so they can print & manage their own cards.
Printing Services
However, the firm does offer printing services, too, a facility used by GMP ,which meant that the police force shared information with the company.
By way of contrast, Digital ID’s customers also include the BBC, but they buy blank cards & prints the details itself in-house.
It is unclear why the GMP chose outsourcing over in-house production for its warrant cards & staff passes.
