Names and roles of serving officers exposed after a data breach in N Ireland’s police force

Stay Updated on Northern Ireland with our Free Newsletter

Sign up for our myFT Daily Digest email, delivering the latest Northern Ireland news to your inbox every morning.

On Tuesday, Northern Ireland police launched an investigation into a data breach that resulted in the publication of names and roles of thousands of serving officers on a public website.

The security mishap has been strongly criticized by the body representing rank-and-file officers due to its potential for causing “incalculable damage” in the wrong hands.

The Police Service of Northern Ireland assured that the compromised data only included the surnames, initials, locations, and departments of current employees, with no other personal information disclosed.

However, the revelation of such sensitive details poses a significant threat in a region where the police have frequently been targeted, especially considering a recent murder attempt on one of the force’s senior detectives investigating organized crime and paramilitary activity.

“The information was promptly removed,” stated Assistant Chief Constable Chris Todd, the PSNI’s senior information risk owner.

This is the last thing that anybody in the [PSNI] wants to be hearing this evening

During a press conference in Belfast, Assistant Chief Constable Chris Todd expressed his apologies to the officers for the “simple human error” that occurred. He called the situation “unacceptable.”

He further emphasized the severity of the incident, stating, “We operate in an environment where there is a severe threat to our colleagues from Northern Ireland-related terrorism, and this is the last thing that anybody in the organization wants to be hearing this evening.” Todd assured a thorough investigation would be conducted.

The compromised information remained visible on a public website for over two hours.

The PSNI revealed that the data was published as part of a freedom of information request, but no details regarding the requester or the purpose were immediately available.

Chris Heaton-Harris, the UK’s Northern Ireland Secretary, expressed deep concern and maintained close contact with senior officers for updates on the situation.

The Police Federation for Northern Ireland, which represents all ranks up to chief inspector, characterized the incident as a “breach of monumental proportions” and stressed the potential incalculable damage that the compromised data could cause if fallen into the wrong hands.

The Belfast Telegraph reported that the published details included information about 40 PSNI staff members who serve with UK intelligence service MI5 and others responsible for safeguarding senior politicians and judges.

In March, Northern Ireland’s terrorism threat level was raised to “severe,” indicating an increased likelihood of attacks in a region still divided by deep-seated differences even 25 years after a peace agreement ended three decades of conflict.

Liam Kelly, Chair of the Police Federation, expressed deep shock and anger regarding the incident, stating, “We’re fortunate that the PSNI spreadsheet didn’t contain officer and staff home addresses. Otherwise, we would be facing a potentially calamitous situation.”

The PSNI was established in 2001 following the end of the Troubles, a period marked by republicans fighting for the reunification of Ireland, loyalists striving to maintain British rule, and the involvement of UK security forces. The predecessor force, the mainly Protestant Royal Ulster Constabulary, was frequently targeted in republican attacks.

Sinn Féin, the largest political party in Northern Ireland, criticized the data breach, claiming that it potentially impacted up to 10,000 officers. They expressed concerns not only for the officers themselves but also for their staff and families.

Gerry Kelly, the party’s policing spokesman, demanded an investigation into the breach, stating, “We need to know how this breach occurred.”