Cybercriminals linked to the extortion group “World Leaks” have successfully breached a digital storage system, exposing a massive cache of sensitive internal documents from the Los Angeles Police Department (LAPD). The unauthorized access resulted in the leak of approximately 7.7 terabytes of data, comprising over 337,000 individual files.
Scope of the Exposed Data
The compromised information includes highly sensitive materials, such as police officer personnel files, internal affairs investigation reports, and discovery documents. According to reports from the Los Angeles Times, these files contain unredacted criminal complaints, witness identities, and private medical data. Under California state law, the vast majority of these police records are considered private, making this incident a significant security failure.
Attribution and Breach Origin
Emma Best, founder of the transparency group Distributed Denial of Secrets, confirmed online that the extortion gang World Leaks is responsible for the breach. The group initially published the data on its own leak site as a pressure tactic to force victims into paying a ransom, though the files have since been removed from the site for reasons that remain unclear.
While the LAPD is currently investigating the incident, the department stated that its own internal systems and networks were not directly compromised. Instead, the breach affected a third-party digital storage system utilized by the Los Angeles City Attorney’s Office. Ivor Pine, a spokesperson for the City Attorney’s Office, acknowledged “unauthorized access to a third-party tool,” claiming the application was self-contained and lacked links to broader department records.
The Threat Actor: World Leaks
World Leaks emerged in January 2025, serving as an apparent rebrand of the ransomware group Hunters International. The organization has rapidly expanded its target list, hitting entities across the manufacturing, technology, and healthcare sectors.
Security experts at cybersecurity firm Halcyon note that the group has demonstrated advanced capabilities, previously targeting defense contractors and major Fortune 500 companies. The LAPD is currently coordinating with the City Attorney’s Office to audit the impacted files and determine the full extent of the exposure.