{"title":"Incidents in United Kingdom","description":"Breaches and advisories naming victims in United Kingdom.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/qilin-ransomware-group-claims-attack-on-simply-uk-per-ransomlook/","title":"Qilin ransomware group claims attack on Simply UK, per RansomLook","url":"https://vulnpocalypse.dev/advisories/qilin-ransomware-group-claims-attack-on-simply-uk-per-ransomlook/","date":"2026-11-07","summary":"RansomLook reports the Qilin ransomware group listed Simply UK on its leak site; the claim is unverified, so watch for an official statement.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ransomhouse-ransomware-group-claims-tfg-london-on-its-leak-site/","title":"RansomHouse ransomware group claims TFG London on its leak site","url":"https://vulnpocalypse.dev/advisories/ransomhouse-ransomware-group-claims-tfg-london-on-its-leak-site/","date":"2026-11-04","summary":"The RansomHouse group lists TFG London as a victim on its leak site, per RansomLook; the claim is unverified, so watch for an official statement.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/gchq-uk-thousands-of-removable-storage-devices-unaccounted-for-ipco/","title":"GCHQ (UK): \"thousands\" of removable storage devices unaccounted for, IPCO annual report","url":"https://vulnpocalypse.dev/advisories/gchq-uk-thousands-of-removable-storage-devices-unaccounted-for-ipco/","date":"2026-10-29","summary":"The Investigatory Powers Commissioner's annual report for 2025 says GCHQ cannot immediately locate a \"very significant number\" of removable media items...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/staffordshire-police-uk-ico-reprimand-after-domestic-abuse-victims/","title":"Staffordshire Police (UK): ICO reprimand after domestic abuse victim's address disclosed to alleged abuser","url":"https://vulnpocalypse.dev/advisories/staffordshire-police-uk-ico-reprimand-after-domestic-abuse-victims/","date":"2026-10-28","summary":"Per Infosecurity Magazine (29 Oct 2026), the ICO issued a reprimand on 28 Oct after the force served a Domestic Violence Protection Notice on the alleged...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ogi-networks-and-data-cymru-wales-ico-reprimands-after-ransomware/","title":"Ogi Networks and Data Cymru (Wales): ICO reprimands after ransomware entered via 'Password1' test account","url":"https://vulnpocalypse.dev/advisories/ogi-networks-and-data-cymru-wales-ico-reprimands-after-ransomware/","date":"2026-10-20","summary":"The ICO reprimanded IT provider Ogi Networks Limited and Data Cymru (Local Government Data Unit, Wales) over a ransomware attack on 1 Nov 2024 that...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/metropolitan-police-service-london-ico-reprimand-and-enforcement/","title":"Metropolitan Police Service (London): ICO reprimand and enforcement notice over unapproved use of the Auror retail-crime platform","url":"https://vulnpocalypse.dev/advisories/metropolitan-police-service-london-ico-reprimand-and-enforcement/","date":"2026-10-15","summary":"Per Infosecurity Magazine, the ICO found Met officers and staff used the Auror intelligence-sharing platform from March 2023 to September 2024 without...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/tfg-london-uk-phase-eight-hobbs-whistles-cyber-incident-took-it/","title":"TFG London (UK; Phase Eight, Hobbs, Whistles): cyber incident took IT systems down","url":"https://vulnpocalypse.dev/advisories/tfg-london-uk-phase-eight-hobbs-whistles-cyber-incident-took-it/","date":"2026-10-13","summary":"The Foschini Group's SENS announcement says TFG London identified a cybersecurity incident on 11 Oct 2026 affecting IT systems of its Phase Eight, Hobbs...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/liberating-research-uk-medical-survey-firms-open-elasticsearch-server/","title":"Liberating Research (UK): medical survey firm's open Elasticsearch server exposed diagnoses of about 100,000 people","url":"https://vulnpocalypse.dev/advisories/liberating-research-uk-medical-survey-firms-open-elasticsearch-server/","date":"2026-10-12","summary":"UpGuard, which found the exposure, says a publicly accessible Elasticsearch server belonging to the UK medical survey company exposed personal data of...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/lq-london-quadrant-housing-trust-uk-website-attack-exposes-contact/","title":"L&Q (London & Quadrant Housing Trust, UK): website attack exposes contact messages of about 12,000 residents","url":"https://vulnpocalypse.dev/advisories/lq-london-quadrant-housing-trust-uk-website-attack-exposes-contact/","date":"2026-09-28","summary":"Per Inside Housing, L&Q said \"a targeted cyber security incident that has affected L&Q's website\" let an unauthorised party access emails and webform...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/east-suffolk-and-north-essex-nhs-foundation-trust-uk-ten-staff/","title":"East Suffolk and North Essex NHS Foundation Trust (UK): ten staff removed after suspected snooping on medical records of Noah Woods","url":"https://vulnpocalypse.dev/advisories/east-suffolk-and-north-essex-nhs-foundation-trust-uk-ten-staff/","date":"2026-09-27","summary":"An ESNEFT spokesman said \"Ten people working at the trust have been removed from direct active duty or suspended pending further investigation\" over...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/burnaby-school-district-41-british-columbia-ransomware-attack-staff/","title":"Burnaby School District 41 (British Columbia): ransomware attack, staff and student files stolen","url":"https://vulnpocalypse.dev/advisories/burnaby-school-district-41-british-columbia-ransomware-attack-staff/","date":"2026-09-23","summary":"The district said a cyber incident came to its attention on 21 Sep and that \"During this ransomware attack, an unauthorized third party gained access to...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/haruko-uk-crypto-infrastructure-provider-breach-exposes-15-clients/","title":"Haruko (UK): crypto infrastructure provider breach exposes 15 clients' exchange API details, some funds lost","url":"https://vulnpocalypse.dev/advisories/haruko-uk-crypto-infrastructure-provider-breach-exposes-15-clients/","date":"2026-09-18","summary":"Per CoinDesk, co-founder and CTO Adam Carlile told clients \"It was 15 clients impacted\" in \"a targeted attack by a group on us\".","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/chosen-brick-iranian-state-spyware-against-dissidents-and-journalists/","title":"CHOSEN BRICK: Iranian state spyware against dissidents and journalists (NCSC, FBI, AIVD)","url":"https://vulnpocalypse.dev/advisories/chosen-brick-iranian-state-spyware-against-dissidents-and-journalists/","date":"2026-09-15","summary":"Joint advisory: \"Iranian state cyber actors\" have used the Windows malware CHOSEN BRICK since at least 2025 against dissidents, activists and journalists...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/uk-police-national-legal-database-pnld-and-ask-the-police-police-and/","title":"UK Police National Legal Database (PNLD) and Ask the Police: police and justice staff details published","url":"https://vulnpocalypse.dev/advisories/uk-police-national-legal-database-pnld-and-ask-the-police-police-and/","date":"2026-08-02","summary":"PNLD (run by West Yorkshire Police) identified an incident on 26 Jul 2026.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/university-of-nottingham-oracle-weblogic-rce-used-to-access/","title":"University of Nottingham: Oracle WebLogic RCE used to access PeopleSoft student records","url":"https://vulnpocalypse.dev/advisories/university-of-nottingham-oracle-weblogic-rce-used-to-access/","date":"2026-06-09","summary":"Unauthorised activity was identified on 9 Jun 2026 in the Campus Solutions (PeopleSoft) student records platform, run in an isolated third-party-maintained...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/uk-biobank-de-identified-data-on-about-500000-participants-found-for/","title":"UK Biobank: de-identified data on about 500,000 participants found for sale on an Alibaba consumer site","url":"https://vulnpocalypse.dev/advisories/uk-biobank-de-identified-data-on-about-500000-participants-found-for/","date":"2026-04-23","summary":"UK Biobank said it found de-identified participant data offered for sale on a consumer website operated by Alibaba.","tags":["breach"]}]}