Indicators of compromise · MimiKatz — 4 shown
46deeb93c5d7be110d5459abc663ab8edc4bf2d8e098e0d3e96f613205d556f997479f00486752b22b3d19feffde5fc4e23c615f898d994607ccd834cdbddc7fb4cc8242602d10d51dbe982c7734ea506d7bde39e55cca7a183f5356f640b473bbcd729b
Defanged third-party indicators (abuse.ch). The defanging is deliberate: never click, resolve or fetch these values. An indicator corroborates a report — it never proves one, and its presence here does not mean this story's hosts are listed.
UK Criminal Records Office Reprimanded After Three Undetected Intrusions Over Two Years
The UK Information Commissioner's Office (ICO) has censured ACRO Criminal Records Office — the national policing unit handling sensitive data stored on the Police National Computer — after hackers successfully compromised it in three separate intrusions between July 2021 and June 2023, exposing personal data of thousands of people including victims of domestic violence.
Key Facts
| Attribute | Detail |
|---|---|
| Regulator | UK ICO (reprimand notice) |
| Victim | ACRO Criminal Records Office (UK policing) |
| Intrusions | Three, July 2021 – June 2023, all via the public-facing customer portal |
| Root causes | Kentico CMS unpatched since September 2019 with known, publicly documented vulnerabilities; no ownership of patching between ACRO, MSP and web developer |
| Alert failures | Trend Micro alerts unread — including four quarantined detections of Mimikatz credential harvesting |
| Sensitivity | Records of domestic-violence victims among those exposed |
Context
The reprimand is a textbook case of foundational hygiene failures: unclear patch ownership across a three-party supply chain and ignored security alerts over a two-year intrusion window. It is directly transferable to AU and NZ public-sector agencies running internet-facing CMS platforms, and mirrors the kind of basic-hygiene failures OAIC's Notifiable Data Breaches scheme and the Privacy Act 2020 72-hour notification regime are designed to expose.
Related Pages
- Lazarus Exploits Windows Zero Day To Gain System Access And Deploy Backdoor — same-week Windows zero-day exploitation
Sources: raw/digests/Cyber-Digest-2026-08-13.md