CJIS Online
ModerateReportedPublic sector
In early October 2026, an attacker claimed to have released a file said to come from CJIS Online, a training platform for the FBI's CJIS security policy used by US law enforcement. The file reportedly holds 469,169 user records linked to 23,076 agencies and contractors, including 248,825 unique email addresses and 208,918 phone numbers. The fields described are user ID, name, email address, phone number, organisation, profile type and account status. No password field appears in the structure described. The authenticity of the data, its extraction date and the method of access are unconfirmed, and the organisation has not made any statement.
These work contact details and affiliations could be used to target law enforcement and justice-sector personnel and contractors with phishing or impersonation.
- Disclosed on
- October 5, 2026
- Sector
- Public sector
- Country
- United States
- Cause
- Undisclosed
Exposed data
- Customer ID
- Full name
- Email address
- Phone number
- Employment data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact