The UK Criminal Records Office (ACRO) experienced a cybersecurity incident, causing it to take down its customer portal and disrupting several operations, including police certificate procurement processing. ESET’s global security advisor and Kevin Beaumont, Head of Security Operations Centre at Arcadia Group Ltd, believe that ACRO has suffered a ransomware attack. The agency suspects that data, including identification and criminal conviction information, had been compromised during the two-month-long security breach. Since its website is down, the agency has to process police certificate applications manually by email. ACRO is working with national agencies to investigate the incident.