KINGSTON — Kingston Police released details October 2 about a cyberattack that began January 1, 2025, saying an intruder stole and encrypted approximately 160 gigabytes of data.

The force says compromised credentials provided access through its VPN. Staff discovered the intrusion January 3 and shut down systems.

What the disclosure establishes

Police say the stolen material included court records, tickets, bail lists and information involving victims, witnesses and employees. Corruption of the extracted files prevented a complete review; analysts assessed a sample.

The force considers misuse unlikely, citing monitoring that found no evidence of disclosure. It nevertheless cannot exclude the possibility that the attacker kept copies or shared information elsewhere.

That distinction matters: an assessment of low risk is not proof that every stolen record was deleted.

Security investment and questions

The police board plans $3.9 million in technology and cybersecurity spending over three years. Anyone concerned can contact cyberinfo@kpf.ca or consult the notice's advice on account monitoring and privacy complaints.

Source: Kingston Police notice, October 2.

TNC archive AI-generated cybersecurity illustration; not a photograph of this incident.