A major data exposure involving the Los Angeles Police Department has surfaced after attackers gained access to a third-party discovery transfer tool used by the Los Angeles City Attorney’s Office, not LAPD’s own network. The leaked trove reportedly spans 7.7 terabytes and more than 337,000 files, including personnel records, Internal Affairs material, witness names, medical information, investigative files, and unredacted criminal complaints.
TL;DR
- The breach hit a third-party discovery tool used by the LA City Attorney’s Office, while LAPD says its own systems were not breached.
- The exposed cache was reported at 7.7TB and 337,000 files, including sensitive police, witness, and medical records.
- The city says it learned of the incident on March 20, and attribution to World Leaks remains publicly reported, not officially confirmed.
Hackers have reportedly exposed a vast cache of sensitive LAPD records after breaching a digital storage tool used by the Los Angeles City Attorney’s Office to transfer legal discovery. The incident was first detailed by the Los Angeles Times and then confirmed in part by LAPD and the city attorney’s office, both of which stressed that the breach did not involve LAPD’s own systems or networks.
In its statement, LAPD said it was taking the incident seriously and was working with the City Attorney’s Office to determine the full scope of the breach. The department said the compromised storage contained discovery documents from previously adjudicated or settled LAPD civil litigation cases. That distinction matters because it suggests the exposure came through a legal records workflow rather than a direct compromise of police infrastructure.
The Los Angeles City Attorney’s Office said it became aware of the incident on March 20. Spokesperson Ivor Pine said the breach involved unauthorized access to a third-party tool used by the office to transfer discovery to opposing counsel and litigants. Pine also said no other city applications or systems were involved, and that the exposed information was self-contained within that application.
The office added that it is working with law enforcement, external forensic specialists, and the city’s Information Technology Agency to review the affected data and determine whether notifications are required. That means the city is still trying to establish exactly what was stored in the tool, who may have been impacted, and what legal obligations may follow.
The scale of the leak is what makes this incident especially serious. The archive contained 7.7 terabytes of data across more than 337,000 files. Those materials reportedly included officer personnel files, Internal Affairs investigations, disciplinary histories, witness names, medical information, investigative records, and unredacted criminal complaints, records that are usually tightly controlled.
Topics for more insights:
So far, officials have not disclosed how many individuals may be affected. That leaves major unanswered questions around privacy exposure, officer safety, litigation risk, and whether sensitive case-related information may have already circulated more widely online before the files were removed from public view.
Public reporting has linked the incident to the extortion group World Leaks. Even the transparency activist Emma Best linked the leak to World Leaks after reviewing data that was briefly posted on the gang’s leak site. Halcyon describes World Leaks as a data extortion operation that emerged in January 2025 as a rebrand of Hunters International.
However, neither LAPD nor the City Attorney’s Office has publicly confirmed that attribution, so presenting World Leaks as the definitive attacker would go beyond what officials have actually said so far. For now, the most accurate framing is that a third-party legal discovery tool was breached, LAPD files were exposed at significant scale, and the full scope, affected population, and final attribution are still under investigation.
The fallout is already widening. The Los Angeles Police Protective League criticized the city attorney’s office, saying it learned of the breach through media reports rather than direct notice. The FBI’s Los Angeles field office is also assisting, underscoring the seriousness of the incident and the pressure on city officials to clarify how the breach happened and what comes next.
Join The Discussion