Kingston Police cyber breach: 345,000 documents stolen in January 2025 attack
A threat actor stole 160 GB of data from Kingston Police on 1 January 2025. The force has since closed the case and pledged $3.9 million in cybersecurity upgrades.
Kingston Police closes case on January 2025 data breach affecting 100,000 personal records
Kingston Police has officially closed its investigation into a cybersecurity incident that struck the force on 1 January 2025, thewhig.com reports, revealing that a threat actor extracted 345,000 documents — including 100,000 containing personal information — from the service's servers.
A threat actor used compromised account credentials to access the force's systems through its VPN application on New Year's Day. Investigators were unable to determine how those credentials were initially compromised, but the intrusion was detected on 3 January, at which point all systems were shut down.
By that time, the attacker had already encrypted and extracted 160 GB of data. Analysts determined that the majority of the 345,000 documents were newsletters and bulk emails, but approximately 100,000 were identified as containing personal information.
OPP brought in; threat actor agrees to delete data
Cybersecurity experts from the Ontario Provincial Police were engaged to investigate and assist with system restoration. Investigators were able to make contact with the threat actor, who agreed to delete the extracted data and provide proof of deletion.
"Since that time, the OPP, and partners from police agencies around the world, have continued to monitor the dark web, and there has been no evidence of disclosure of any of the data extracted in the nine months that have followed the incident," the force's news release stated.
Kingston Police acknowledged it cannot guarantee the information has not been copied or misused, but assessed the risk as low.
"KP remains confident that the likelihood of disclosure of this data, particularly given the passage of time, is very low, but our partners remain vigilant in monitoring the dark web for signs of disclosure," the release continued.
$3.9 million investment in cybersecurity to follow
In response to the breach, Kingston Police and the Kingston Police Services Board have developed a plan, with expert assistance, to invest $3.9 million over the next three years in cybersecurity and IT infrastructure improvements.
The force will also increase its full-time IT staff by 50 per cent, growing from four to six employees.
"In today's digital age, advanced IT and cybersecurity are essential for effective communication, decision-making and uninterrupted service to the residents of Kingston. It is important that we make the necessary investments to ensure optimal service and security," the release stated.
Advice for affected individuals
Police have advised individuals whose information may have been caught up in the breach to take precautions. Depending on the type of information involved, affected people may wish to monitor financial accounts, change passwords, and remain alert to signs of identity misuse.
Officials confirmed that should additional information become available, it will be shared publicly. Anyone with questions can contact the force directly at [email protected].
Complaints regarding the data breach may be submitted to the Information and Privacy Commissioner of Ontario (IPC) via their website, or by mail at 2 Bloor Street E., Suite 1400, Toronto, ON, M4W 1A8.
Source: Google News JM — Kingston