Severe Security Flaws Lead to Sensitive Data Leak at UK Criminal Records Office

ACRO failed to patch its content management system or monitor security alerts, resulting in a sensitive data leak with unknown exfiltration status.

• ACRO failed to patch its CMS and read security alerts
• The agency cannot confirm whether sensitive data was exfiltrated