Security News

Welsh Police Force Hit by Cyberattack, Staff Data Possibly Exposed

The Record · 26 Sept 2026

Key Takeaway Even public sector and law enforcement bodies remain prime targets for cyberattacks, so businesses should ensure incident response plans and staff data protections are regularly reviewed and tested.

Dyfed-Powys Police, which covers southwest Wales and employs more than 2,000 officers and staff, has confirmed a cyberattack that disrupted some non-emergency systems. The incident was first identified earlier this month, and investigators are still working to determine whether employee information was accessed or compromised.

The force said there is currently no evidence that any information belonging to members of the public was affected. Details on how the breach occurred, and exactly what staff data may be at risk, have not been disclosed. No group has claimed responsibility for the attack.

Tarian, the regional organised crime unit for southern Wales, is leading the investigation alongside cybersecurity specialists. Police have said they are taking steps to protect their systems and information, and further updates will follow as the investigation progresses.

data breach law enforcement UK cybersecurity incident response

Summarised by CISO AI from The Record. We link back to every original so you can read it yourself.