A Deletion Promise Is Not Proof
The 2 October 2026 Kingston Police notice concerns a breach on New Year’s Day 2025. An attacker entered through the VPN using a compromised login; how the login was compromised is unknown. It was discovered two days later. Before shutdown, files were encrypted and 160 GB had been taken.
Removing duplicates and junk left about 100,000 documents, not that many distinct people. Corruption prevented a complete review; investigators used representative sampling.
The records concerned court and remand matters, victims, witnesses, missing people, staff and officers. Some contained driving-licence, Social Insurance, payment-card, health-card or passport identifiers.
The attacker promised deletion and proof. The notice reports no detected disclosure, not independently verified erasure. Retained copies cannot be excluded; permanent record loss is still being assessed.
Potentially affected people should review accounts and get a credit report, contact the appropriate bank or government document issuer, and watch for deceptive messages asking for personal information.
