Breachesby GlyphACRO Criminal Records Office
Disclosed Aug 7, 2026Confirmed
UK ICO reprimand for security failings
The Information Commissioner (the Commissioner) issues a reprimand to ACRO Criminal Records Office for infringements of Articles 32(1), 32(1)(b) and 32(1)(d) of the UK GDPR. This enforcement action follows a cyber incident in which the personal data of approximately 10,000 UK data subjects may have been affected.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Aug 7, 2026 |
| Attack | Not stated |
| Data exposed | Not stated |
| Sector | Government · GB |
| Status | Confirmed |
| Lawsuit or fine | UK ICO reprimand (2026-08-07) |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (UK ICO), confirmed by UK ICO. Record counts are as reported. Not legal advice.