[BreachExchange] Forensic firm used by police targeted in cyber attack

Destry Winant destry at riskbasedsecurity.com
Mon Jun 24 09:48:41 EDT 2019


https://www.independent.co.uk/news/uk/home-news/police-forensic-company-cyber-attack-ransomware-eurofins-scientific-national-crime-agency-a8969896.html

A criminal probe has been launched after a forensics firm widely used
by police to help with investigations was targeted in a cyber attack.

There are fears key evidence may have been compromised after Eurofins
Scientific – which is used by forces across the UK – was hit by a two
day ransomware onslaught at the start of June.

Submissions to the firm, which are thought to include finger print and
other crime scene data, have now been temporarily suspended, while the
National Crime Agency leads an investigation into the attack.

Rob Jones, the NCA’s director of threat leadership, said: "Specialist
cyber-crime officers are working with partners from the National Cyber
Security Centre and the National Police Chiefs’ Council to mitigate
the risks and assess the nature of this incident.

"We are securing evidence and forensically analysing infected
computers, but due to the quantity of data involved and the complexity
of these kinds of inquiries, this is an investigation which will take
time."

Chief Constable James Vaughan, the NPCC lead for forensics, said: "As
a result of the ransomware attack against Eurofins Scientific, we have
temporarily suspended all law enforcement submissions to their
forensic science subsidiary.

"Our priority – alongside the Association of Police and Crime
Commissioners – is to minimise the impact on the criminal justice
system.

"We have put our national contingency plans in place, which will see
urgent submissions and priority work diverted to alternative suppliers
to be dealt with as quickly as possible.

"It is too early to fully quantify the impact but we are working at
pace with partners to understand and mitigate the risks."

Louise Haigh, Labour’s shadow crime and policing minister, urged
police to work quickly to establish the facts of the case.

She said: “This is the latest in a long line of failures in the
forensics market: there is a criminal investigation into manipulation
of forensic samples ongoing at another major provider, and countless
forensic providers are failing to meet the bare minimum standards.”


More information about the BreachExchange mailing list