<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Vulnpocalypse: Incidents in United Kingdom</title><link>https://vulnpocalypse.dev/feeds/</link><description>Breaches and advisories naming victims in United Kingdom.</description><language>en</language><lastBuildDate>Thu, 12 Nov 2026 16:59:02 +0000</lastBuildDate><atom:link href="https://vulnpocalypse.dev/feeds/country-gb.xml" rel="self" type="application/rss+xml"/><item><title>Qilin ransomware group claims attack on Simply UK, per RansomLook</title><link>https://vulnpocalypse.dev/advisories/qilin-ransomware-group-claims-attack-on-simply-uk-per-ransomlook/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/qilin-ransomware-group-claims-attack-on-simply-uk-per-ransomlook/</guid><pubDate>Sat, 07 Nov 2026 12:00:00 +0000</pubDate><description>RansomLook reports the Qilin ransomware group listed Simply UK on its leak site; the claim is unverified, so watch for an official statement.</description><category>breach</category></item><item><title>RansomHouse ransomware group claims TFG London on its leak site</title><link>https://vulnpocalypse.dev/advisories/ransomhouse-ransomware-group-claims-tfg-london-on-its-leak-site/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/ransomhouse-ransomware-group-claims-tfg-london-on-its-leak-site/</guid><pubDate>Wed, 04 Nov 2026 12:00:00 +0000</pubDate><description>The RansomHouse group lists TFG London as a victim on its leak site, per RansomLook; the claim is unverified, so watch for an official statement.</description><category>breach</category></item><item><title>GCHQ (UK): &quot;thousands&quot; of removable storage devices unaccounted for, IPCO annual report</title><link>https://vulnpocalypse.dev/advisories/gchq-uk-thousands-of-removable-storage-devices-unaccounted-for-ipco/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/gchq-uk-thousands-of-removable-storage-devices-unaccounted-for-ipco/</guid><pubDate>Thu, 29 Oct 2026 12:00:00 +0000</pubDate><description>The Investigatory Powers Commissioner&#x27;s annual report for 2025 says GCHQ cannot immediately locate a &quot;very significant number&quot; of removable media items...</description><category>breach</category></item><item><title>Staffordshire Police (UK): ICO reprimand after domestic abuse victim&#x27;s address disclosed to alleged abuser</title><link>https://vulnpocalypse.dev/advisories/staffordshire-police-uk-ico-reprimand-after-domestic-abuse-victims/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/staffordshire-police-uk-ico-reprimand-after-domestic-abuse-victims/</guid><pubDate>Wed, 28 Oct 2026 12:00:00 +0000</pubDate><description>Per Infosecurity Magazine (29 Oct 2026), the ICO issued a reprimand on 28 Oct after the force served a Domestic Violence Protection Notice on the alleged...</description><category>breach</category></item><item><title>Ogi Networks and Data Cymru (Wales): ICO reprimands after ransomware entered via &#x27;Password1&#x27; test account</title><link>https://vulnpocalypse.dev/advisories/ogi-networks-and-data-cymru-wales-ico-reprimands-after-ransomware/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/ogi-networks-and-data-cymru-wales-ico-reprimands-after-ransomware/</guid><pubDate>Tue, 20 Oct 2026 12:00:00 +0000</pubDate><description>The ICO reprimanded IT provider Ogi Networks Limited and Data Cymru (Local Government Data Unit, Wales) over a ransomware attack on 1 Nov 2024 that...</description><category>breach</category></item><item><title>Metropolitan Police Service (London): ICO reprimand and enforcement notice over unapproved use of the Auror retail-crime platform</title><link>https://vulnpocalypse.dev/advisories/metropolitan-police-service-london-ico-reprimand-and-enforcement/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/metropolitan-police-service-london-ico-reprimand-and-enforcement/</guid><pubDate>Thu, 15 Oct 2026 12:00:00 +0000</pubDate><description>Per Infosecurity Magazine, the ICO found Met officers and staff used the Auror intelligence-sharing platform from March 2023 to September 2024 without...</description><category>breach</category></item><item><title>TFG London (UK; Phase Eight, Hobbs, Whistles): cyber incident took IT systems down</title><link>https://vulnpocalypse.dev/advisories/tfg-london-uk-phase-eight-hobbs-whistles-cyber-incident-took-it/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/tfg-london-uk-phase-eight-hobbs-whistles-cyber-incident-took-it/</guid><pubDate>Tue, 13 Oct 2026 12:00:00 +0000</pubDate><description>The Foschini Group&#x27;s SENS announcement says TFG London identified a cybersecurity incident on 11 Oct 2026 affecting IT systems of its Phase Eight, Hobbs...</description><category>breach</category></item><item><title>Liberating Research (UK): medical survey firm&#x27;s open Elasticsearch server exposed diagnoses of about 100,000 people</title><link>https://vulnpocalypse.dev/advisories/liberating-research-uk-medical-survey-firms-open-elasticsearch-server/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/liberating-research-uk-medical-survey-firms-open-elasticsearch-server/</guid><pubDate>Mon, 12 Oct 2026 12:00:00 +0000</pubDate><description>UpGuard, which found the exposure, says a publicly accessible Elasticsearch server belonging to the UK medical survey company exposed personal data of...</description><category>breach</category></item><item><title>L&amp;Q (London &amp; Quadrant Housing Trust, UK): website attack exposes contact messages of about 12,000 residents</title><link>https://vulnpocalypse.dev/advisories/lq-london-quadrant-housing-trust-uk-website-attack-exposes-contact/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/lq-london-quadrant-housing-trust-uk-website-attack-exposes-contact/</guid><pubDate>Mon, 28 Sep 2026 12:00:00 +0000</pubDate><description>Per Inside Housing, L&amp;Q said &quot;a targeted cyber security incident that has affected L&amp;Q&#x27;s website&quot; let an unauthorised party access emails and webform...</description><category>breach</category></item><item><title>East Suffolk and North Essex NHS Foundation Trust (UK): ten staff removed after suspected snooping on medical records of Noah Woods</title><link>https://vulnpocalypse.dev/advisories/east-suffolk-and-north-essex-nhs-foundation-trust-uk-ten-staff/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/east-suffolk-and-north-essex-nhs-foundation-trust-uk-ten-staff/</guid><pubDate>Sun, 27 Sep 2026 12:00:00 +0000</pubDate><description>An ESNEFT spokesman said &quot;Ten people working at the trust have been removed from direct active duty or suspended pending further investigation&quot; over...</description><category>breach</category></item><item><title>Burnaby School District 41 (British Columbia): ransomware attack, staff and student files stolen</title><link>https://vulnpocalypse.dev/advisories/burnaby-school-district-41-british-columbia-ransomware-attack-staff/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/burnaby-school-district-41-british-columbia-ransomware-attack-staff/</guid><pubDate>Wed, 23 Sep 2026 12:00:00 +0000</pubDate><description>The district said a cyber incident came to its attention on 21 Sep and that &quot;During this ransomware attack, an unauthorized third party gained access to...</description><category>breach</category></item><item><title>Haruko (UK): crypto infrastructure provider breach exposes 15 clients&#x27; exchange API details, some funds lost</title><link>https://vulnpocalypse.dev/advisories/haruko-uk-crypto-infrastructure-provider-breach-exposes-15-clients/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/haruko-uk-crypto-infrastructure-provider-breach-exposes-15-clients/</guid><pubDate>Fri, 18 Sep 2026 12:00:00 +0000</pubDate><description>Per CoinDesk, co-founder and CTO Adam Carlile told clients &quot;It was 15 clients impacted&quot; in &quot;a targeted attack by a group on us&quot;.</description><category>breach</category></item><item><title>CHOSEN BRICK: Iranian state spyware against dissidents and journalists (NCSC, FBI, AIVD)</title><link>https://vulnpocalypse.dev/advisories/chosen-brick-iranian-state-spyware-against-dissidents-and-journalists/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/chosen-brick-iranian-state-spyware-against-dissidents-and-journalists/</guid><pubDate>Tue, 15 Sep 2026 12:00:00 +0000</pubDate><description>Joint advisory: &quot;Iranian state cyber actors&quot; have used the Windows malware CHOSEN BRICK since at least 2025 against dissidents, activists and journalists...</description><category>breach</category></item><item><title>UK Police National Legal Database (PNLD) and Ask the Police: police and justice staff details published</title><link>https://vulnpocalypse.dev/advisories/uk-police-national-legal-database-pnld-and-ask-the-police-police-and/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/uk-police-national-legal-database-pnld-and-ask-the-police-police-and/</guid><pubDate>Sun, 02 Aug 2026 12:00:00 +0000</pubDate><description>PNLD (run by West Yorkshire Police) identified an incident on 26 Jul 2026.</description><category>breach</category></item><item><title>University of Nottingham: Oracle WebLogic RCE used to access PeopleSoft student records</title><link>https://vulnpocalypse.dev/advisories/university-of-nottingham-oracle-weblogic-rce-used-to-access/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/university-of-nottingham-oracle-weblogic-rce-used-to-access/</guid><pubDate>Tue, 09 Jun 2026 12:00:00 +0000</pubDate><description>Unauthorised activity was identified on 9 Jun 2026 in the Campus Solutions (PeopleSoft) student records platform, run in an isolated third-party-maintained...</description><category>breach</category></item><item><title>UK Biobank: de-identified data on about 500,000 participants found for sale on an Alibaba consumer site</title><link>https://vulnpocalypse.dev/advisories/uk-biobank-de-identified-data-on-about-500000-participants-found-for/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/uk-biobank-de-identified-data-on-about-500000-participants-found-for/</guid><pubDate>Thu, 23 Apr 2026 12:00:00 +0000</pubDate><description>UK Biobank said it found de-identified participant data offered for sale on a consumer website operated by Alibaba.</description><category>breach</category></item></channel></rss>
