Hackers steal and leak sensitive LAPD police documents

Cybercriminals from the extortion gang World Leaks have stolen and leaked a massive trove of sensitive LAPD documents, including officer personnel files, internal affairs investigations, and unredacted criminal complaints containing witness names and medical data. The breach exposed 7.7 terabytes and over 337,000 files from a digital storage system belonging to the Los Angeles City Attorney's Office, not LAPD systems directly. The leaked data was briefly posted on the group's leak website before being removed.

Key Points

• 1. The extortion gang World Leaks allegedly stole 7.7 terabytes and more than 337,000 files of sensitive LAPD data.
• 2. Stolen data included police officer personnel files, internal affairs investigations, and unredacted criminal complaints with witness names and medical information.
• 3. The breach did not compromise LAPD systems directly but affected a digital storage system belonging to the LA City Attorney's Office.
• 4. World Leaks, which emerged in January 2025 as a rebrand of Hunters International, has demonstrated capability against defense contractors and Fortune 500 organizations.
• 5. Under California state law, most police officer records are deemed private, making this leak a potentially unprecedented breach of police data.
• 6. The LA City Attorney's Office confirmed unauthorized access to a third-party tool but said the compromised data was self-contained without links to other department systems.

Relevance

• This breach highlights the vulnerability of law enforcement data when stored in third-party systems outside of direct departmental control, raising questions about government cybersecurity practices.
• The scale and sensitivity of the leaked data could have significant implications for ongoing investigations, witness safety, and officer privacy.
• The incident underscores the growing threat from extortion-focused cybercriminal groups that have evolved from earlier ransomware operations into more sophisticated data theft campaigns.

The LAPD data breach exposes critical weaknesses in how government agencies manage sensitive law enforcement data through third-party systems, with potentially far-reaching consequences for public safety and trust.