Former Police Officer Sentenced for Unauthorized Access to Police Systems

Theregister

Former Police Officer Sentenced for Unauthorized Access to Police Systems

First seen 7 Aug 2026, 12:55 UTC • •36.9

Article Content

1 / 3

Browse articles

ThreatCluster •August 8, 2026 at 11:38 UTC

•Daniel Hughes accessed police systems for personal connections with criminals.
•He was found guilty of multiple counts of unauthorized access and data disclosure.
•Hughes received a suspended sentence, reflecting the severity of his misconduct.

Daniel Hughes, a former Merseyside police officer, was sentenced for unlawfully accessing police computer systems to gather information on criminal associates. Between 2016 and 2019, he conducted unauthorized searches related to serious organized crime, including drugs and firearms. Hughes failed to declare his relationships with criminals, which spanned over ten years, and relayed sensitive information about ongoing investigations to others. He was arrested in March 2022, and after a trial in April 2026, he was found guilty of eight counts of unauthorized access and three counts of disclosing personal data without consent. On August 6, 2026, he received a 12-month suspended prison sentence, along with a fine and community service. The case highlights issues of trust and integrity within law enforcement.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 45d ago How this analysis works

Timeline

2016-01-01

Unauthorized access began

Hughes started conducting unauthorized searches using police systems, accessing sensitive information.

2019-01-01

Unauthorized access continued

Hughes continued accessing police systems until 2019, focusing on serious organized crime cases.

2022-03-01

Hughes arrested

Hughes was arrested, leading to the seizure of his devices and investigation into his communications.

2026-04-20

Trial commenced

Hughes stood trial at Manchester Crown Court, denying all charges related to his misconduct.

2026-06-17

Verdict delivered

The jury found Hughes guilty on eight counts of unauthorized access and three counts of data disclosure.

2026-08-06

Sentencing

Hughes was sentenced to 12 months' imprisonment suspended for two years, along with a fine and community service.

More articles in this cluster (2)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (2)

Crown Prosecution Service
Merseyside Police

Weakness (2)

CWE-200 - Exposure of Sensitive Information
CWE-862 - Missing Authorization

Relationships

Data Breach related to Crown Prosecution Service
Data Breach related to Merseyside Police
Data Breach related to CWE-200 - Exposure of Sensitive Information
Data Breach related to CWE-862 - Missing Authorization

Following this threat?

Track Crown Prosecution Service in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…