Settlement reached between over 19,000 police officers and the Police Federation of England and Wales following cyber-attacks

Over 19,000 current and former police officers and the Police Federation of England and Wales (“PFEW”) have reached a settlement after over three years of litigation.

The officers’ claims related to two ransomware cyber-attacks that the PFEW suffered in March 2019. During the attacks, hackers accessed the PFEW’s systems and encrypted several of its databases, making them inaccessible to the PFEW. The attacks also gave cybercriminals access to the same databases, which contained officers’ personal data, including home address data.

In March 2022, the PFEW admitted liability for unlawfully processing officers’ personal data by not having appropriate technical and organisational measures in place. In May 2025, the PFEW agreed to settle the claim for a total of £15 million (inclusive of legal and insurance costs).

Gerry Facenna KC, Eric Metcalfe and Jenn Lawrence acted for the claimants and were instructed by KP Law.