Los Angeles City Attorney’s Office Investigates Leak of 337,000 LAPD Files
Los Angeles, US
Michael Tran / AFP via Getty Images/Getty
Source Analysis
What Happened
Why It Matters
What Happened
Why It Matters
Where Sources Agree
- arrows_inputBreach Details Confirmed: Reporting establishes the data breach occurred on March 20, with 7.7 terabytes and over 337,000 files exposed, according to official statements and reports.
- arrows_inputSensitive LAPD Records Leaked: Reports consistently note that sensitive LAPD records, including officer personnel files and Internal Affairs investigation documents, were leaked, with 7.7 terabytes of data compromised, according to official statements and reports.
- arrows_inputHacker Group Identified: Coverage broadly notes the extortion group World Leaks has been identified as responsible for the data breach, which exposed 7.7 terabytes of sensitive LAPD records, according to The Los Angeles Times and security researchers.
Where Sources Disagree
- arrows_outputOfficial Breach Acknowledgment: City Attorney and LAPD officials confirm the data breach, stating they are actively investigating and securing systems. However, some outlets report that city and LAPD officials have not publicly acknowledged the breach.
- arrows_outputHack Attribution: One outlet identifies the extortion group World Leaks as responsible for the data breach, while other outlets report a security researcher first disclosed the vulnerability, with the hackers remaining unnamed.
Timeline
April 08, 2026
Public reporting summarizes scope: As of reporting, there had been no full public acknowledgment from some officials about all details, while news outlets and city statements summarized the breach as involving 7.7 terabytes and roughly 337,000 files — including disciplinary histories and investigative records — and said affected records are normally private under state law.
April 08, 2026
City and LAPD secure systems, investigate: The City Attorney’s Office said it secured the affected tool, engaged outside counsel and external forensic support, and worked with city departments and the ITA to review the data; the LAPD said it is working with the City Attorney’s Office to access the impacted files and understand the breach’s scope, noting city officials said no other city systems were affected.
April 07, 2026
Leaked files appear online, then removed: Files from the suspected hack began appearing on social platforms and a leak site, with some posts by accounts such as @WhosTheCop/@WhosThatCop and initial disclosure flagged by a security researcher; some items were later taken down on Tuesday afternoon. Transparency researchers and reporting identified the extortion gang World Leaks as publicizing the breach on its site before removals.
Summary by Ground AI
Sources
See All 26A varied selection of sources chosen by Ground to reflect the diversity of this story’s coverage.
Most Written About
The stories getting the most coverage from the last 24 hours
Source Analysis
Timeline
April 08, 2026
Public reporting summarizes scope: As of reporting, there had been no full public acknowledgment from some officials about all details, while news outlets and city statements summarized the breach as involving 7.7 terabytes and roughly 337,000 files — including disciplinary histories and investigative records — and said affected records are normally private under state law.
April 08, 2026
City and LAPD secure systems, investigate: The City Attorney’s Office said it secured the affected tool, engaged outside counsel and external forensic support, and worked with city departments and the ITA to review the data; the LAPD said it is working with the City Attorney’s Office to access the impacted files and understand the breach’s scope, noting city officials said no other city systems were affected.
April 07, 2026
Leaked files appear online, then removed: Files from the suspected hack began appearing on social platforms and a leak site, with some posts by accounts such as @WhosTheCop/@WhosThatCop and initial disclosure flagged by a security researcher; some items were later taken down on Tuesday afternoon. Transparency researchers and reporting identified the extortion gang World Leaks as publicizing the breach on its site before removals.
