Scotland’s public prosecution service has warned around 300 employees that their work-related personal details may have been exposed after suspicious activity was detected at an unnamed third-party supplier. The Crown Office and Procurator Fiscal Service said its own systems, casework and confidential case information were unaffected, but the breach could increase the risk of targeted phishing or scam attempts against staff.

The affected information came from an online public-sector data maturity assessment completed last year and may include names, job roles and work email addresses. The supplier detected the activity on 5 August, has secured its systems and is investigating the intrusion and accessed data; authorities have not confirmed whether it is linked to a recently disclosed Metabase cloud-service vulnerability.