Data Breach Exposes Personal Information of 300 Scottish Prosecutors Staff

Scotland's Crown Office and Procurator Fiscal Service (COPFS) reported a data breach affecting approximately 300 staff members due to suspicious activity detected by an unnamed third-party supplier on August 5, 2026. The breach involves employment-related data submitted for a data maturity assessment conducted last year, including names, roles, and work email addresses. COPFS confirmed that its own systems were not compromised and that no sensitive case information was affected. The supplier is currently investigating the breach and has taken steps to secure its systems. There is speculation about a possible connection to a recent zero-day vulnerability in the Metabase platform, although this remains unconfirmed. COPFS has advised affected staff to be vigilant against potential phishing attempts resulting from the breach. Further updates will be provided if significant new information emerges.

Key Points: • 300 staff members of COPFS potentially affected by a data breach. • The breach involves employment-related data, not sensitive case information. • Investigation ongoing by the supplier; possible link to a recent Metabase vulnerability.