Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office

A third-party supplier used in Scotland's Data Maturity Programme experienced a data breach that exposed personally identifying information (names, roles, work email addresses) for about 300 COPFS employees; the leak may be broader because multiple government agencies participated in the same assessment. The report notes case/victim/witness information was unaffected, describes the phishing and reconnaissance risks from exposed PII, identifies the likely assessment administrator (Data Orchard) as a potential source, and calls out gaps in continuous vendor risk monitoring.