Dyfed-Powys Police cyberattack may have compromised employee data

Dyfed-Powys Police has confirmed that a cyberattack on 14 September may have exposed employee personal data.

The incident disrupted several non-emergency systems across the Welsh police force, which employs more than 2,000 officers and civilian staff and covers Carmarthenshire, Ceredigion, Pembrokeshire, and Powys. While the attack rendered online and email communication channels temporarily unavailable, those services have since been restored.

A spokesperson for the force said an ongoing internal investigation has found no evidence that personal data belonging to members of the public has been affected. However, the force continues to investigate whether hackers compromised or stole employee data. The force has applied precautionary technical measures to internal systems with support from external cybersecurity specialists and pledged to support affected staff if needed.

The force has reported the incident to the Information Commissioner's Office (ICO).

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.