Industry - Data Breach
Executive Summary
Cybercriminals allegedly stole and leaked 7.7 terabytes of sensitive Los Angeles Police Department data, including officer personnel files, internal affairs investigations, and discovery documents containing unredacted criminal complaints, witness names, and medical information. The breach affected a third-party digital storage system used by the LA City Attorney's Office rather than LAPD systems directly, with the extortion gang World Leaks claiming responsibility. The leak exposes more than...
What Happened
Cybercriminals from the extortion gang World Leaks allegedly stole 7.7 terabytes of Los Angeles Police Department data - over 337,000 files - and leaked it online in April 2026. The breach targeted a third-party digital storage system used by the LA City Attorney's Office, not LAPD systems directly. The stolen data includes police officer personnel files, internal affairs investigations, and discovery documents containing unredacted criminal complaints, witness names, and medical information.
Who Is Affected
The breach affects LAPD officers whose personnel records and internal affairs files were exposed, as well as individuals named in criminal cases - including witnesses, complainants, and others whose personal and medical information appeared in unredacted legal documents. Under California state law, most police officer records are considered private, making this disclosure particularly significant. The breach also impacts the LA City Attorney's Office, which managed the compromised storage system.
Why It Matters
This incident represents a rare and extensive leak of law enforcement data that is normally protected by state privacy laws. The exposure of witness identities and sensitive case materials could endanger individuals involved in criminal proceedings and undermine trust in the confidentiality of legal processes. The breach demonstrates that even highly sensitive government data stored with third-party vendors remains vulnerable to ransomware groups, with World Leaks having previously targeted defense contractors and Fortune 500 companies since emerging in January 2025.
What You Should Do
If you were a witness, complainant, or subject in an LAPD case handled by the LA City Attorney's Office, monitor your accounts and personal information for signs of misuse or identity theft. Consider placing a fraud alert or credit freeze with major credit bureaus as a precautionary measure. Watch for official notifications from the LA City Attorney's Office regarding whether your specific information was included in the breach and what remediation services may be offered. If you are an LAPD officer, contact your department's human resources or legal office for guidance on protecting your personnel information.
AI-Assisted
Event summaries are generated by Claude AI from verified sources and reviewed by humans before publication.
Sources