---
title: Hackers Steal 740,000 Pieces of Data from UK Education Department and Police Database
description: ExfilSquad hacks UK databases, taking 740k data entries from the DfE and PNLD and demanding ransom for the stolen files.
canonical_url: https://codekeeper.co/ticker/exfilsquad-hacks-uk-databases-stealing-records
---

# Hackers Steal 740,000 Pieces of Data from UK Education Department and Police Database

ExfilSquad hacks UK databases, taking 740k data entries from the DfE and PNLD and demanding ransom for the stolen files.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Jul 30, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

A previously unknown hacking gang called ExfilSquad has stolen over 740,000 pieces of data from the UK Department for Education and the Police National Legal Database. The haul exposed names, email addresses, phone numbers and job titles belonging to government officials, senior school leaders, university staff, police officers — and members of the public, including parents. Just over 600,000 lines came from the DfE's help-desk portal, with a smaller batch from its Turing scheme for students studying abroad. The gang claims a further 135,000 from the PNLD, including passwords used to access the site. ExfilSquad is demanding payment from 14 alleged victims, threatening to publish everything if ignored. The DfE says it has seen no evidence ransomware was deployed and that the data is limited to customer service contact details. The PNLD says it held no confidential victim, witness or offender information. Both have reported the breach to the ICO. One senior source briefed on the PNLD leak called the risk low — with a caveat worth acting on: if you reused your PNLD password on anything more sensitive, change it now. Source: [The Guardian](https://www.theguardian.com/technology/2026/jul/29/department-for-education-police-hackers-cybercrime)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fexfilsquad-hacks-uk-databases-stealing-records%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Chinese-Funded Interpol Operation Nets 5,800 Arrests and $293M Intercepted Aug 12, 2026](https://codekeeper.co/ticker/global-cybercrime-sweep-interpol-2026)

[New 'Bucket Hijacking' Attack Can Silently Reroute Your Cloud Data to Hackers Aug 12, 2026](https://codekeeper.co/ticker/cloud-bucket-hijacking-attack-prevention)

[CISA Flagged Six Microsoft Zero-Days as Actively Exploited Back in February — Check You've Patched Aug 11, 2026](https://codekeeper.co/ticker/cisa-adds-microsoft-zero-day-flaws-to-kev-catalog)

[Russian Hackers Exploited Zimbra Zero-Day to Target US and Ukrainian Organizations Aug 11, 2026](https://codekeeper.co/ticker/russian-hackers-exploit-zimbra-flaw)