Great video on the recent Revolute hack
Thesse guys wanted a digital ID and promised to keep our information safe 
Major recent UK government/public-sector data incidents
Year
Organisation
What happened
Scale / data
2026
Department for Education
Two departmental systems were hacked
~607,000 records, including telephone numbers and email addresses
2025
Ministry of Defence / contractor
Cyberattack exposed data connected with Afghan resettlement
Personal information relating to Afghan applicants/resettlement efforts
2024
Ministry of Defence / SSCL
Payroll system hacked
Up to 272,000 current/former military personnel; names, bank details and some addresses
2025
Foreign Office / Home Office systems
Government systems reportedly breached, with suspected Chinese involvement
Sensitive government information
2025
Legal Aid Agency
Personal data breach affecting legal-aid applicants and representatives
Applicants and legal professionals
2024
Leicester City Council
Ransomware attack; huge quantity of information subsequently exposed
~1.3 TB of data, including identity documents and housing information
2024
Transport for London
Cyberattack/data breach
Customer and employee information
2023
Police Service of Northern Ireland
Information accidentally released following an FOI request
All PSNI employees’ details were inadvertently published
2022
Ministry of Defence
Afghan relocation data accidentally exposed
~18,000 Afghans affected initially; the wider incident became much more serious
2022
NHS / government health organisations
Numerous data losses and breaches involving patient information
Multiple incidents
2024–25
UK government departments generally
Lost/stolen laptops, phones and tablets
Thousands of devices
Similar recent incidents
Company
When
What happened
Main weakness
Revolut
Sep 2026
Fake government requests resulted in customer data being handed to attackers
Social engineering / impersonation
Trezor
Sep 2026
Third-party email provider breach enabled phishing emails to be sent using a legitimate Trezor-associated domain
Trusted third party / phishing
Trezor / ShipMonk
Aug–Sep 2026
Shipping provider breach exposed information on ~67,000 US customers
Third-party supplier
SafePal
Aug 2026
Flaw in an order-tracking system exposed information on ~39,798 customers
Web application / database exposure
Quinn Emanuel
2026
Attacker used social engineering to compromise a user account and access files
Human/social engineering
McDermott
2026
Social engineering compromised a user account and exposed sensitive files
Human/social engineering
WilmerHale
Jul 2026
Law-firm breach led to litigation over exposed information
Corporate system compromise