The ransomware attack hit computers at the federation’s Surrey headquarters on March 9, but was only revealed Thursday. Several databases and email systems were encrypted, the organization said, leading to some disruption to its services. Its backup data had also been deleted.
“There is no evidence at this stage that any data was extracted from our systems but this cannot be discounted,” the organization said in a tweet.
None of the other 43 branches across the U.K. were affected, the statement said.
The National Crime Agency is investigating the attack, which the Police Federation said was “not targeted specifically” at the police organization but likely part of a wider campaign.
The organization reported the incident to the U.K.’s data protection regulator on March 11, within the required three days under European law.
A spokesperson for the Police Federation did not comment beyond the organization’s statements, and referred comment to the National Crime Agency, which declined to comment citing an ongoing investigation.
The news comes two days after Norwegian aluminum manufacturer Norsk Hydro was hit by a strain of LockerGoga, a new kind of ransomware that first emerged earlier this year. The manufacturing giant said Thursday most of its operations have been restored.