Shelbyville Police Department listed on interlock leak site

• Ransomware group: interlock
• Country: United States
• Sector: Government & Defense
• Announcement date: November 5, 2025

The Shelbyville Police Department has been listed on the leak site of the threat group known as interlock. The announcement, made on November 5, 2025, involves claims of a significant data breach targeting the local law enforcement agency.

Details of the alleged attack

According to the claims made by the interlock group, the threat actors gained unauthorized access to the department's internal systems. The group alleges that they have successfully accessed the department's camera systems, which includes archived video footage and various databases containing crime-related recordings. Furthermore, the threat actor claims to have accessed various devices within the department that are capable of recording audio or video.

Ransomware attacks of this nature often involve a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to leak stolen data on public or semi-public leak sites, the attackers aim to pressure the victim into paying a ransom to prevent the release of confidential files. This method increases the pressure on the target, especially when the stolen data is highly sensitive or carries significant reputational and legal consequences.

Alleged data contents and affected information

The information provided by the threat actor includes screenshots that display several directories. These folders are labeled as 'Reports', 'SPD Admin', 'Shared', 'C_Drive', and 'bac'. Based on these visual indicators, the leaked data is alleged to consist of a variety of sensitive materials. The specific types of data identified in the listing include:

• Archived video footage
• Crime footage
• Administrative documents
• Internal department reports

The exposure of such diverse data types, ranging from administrative records to direct crime footage, suggests a broad compromise of the department's digital environment. While the specific volume and exact count of the files have not been disclosed by the group, the presence of administrative and crime-related folders indicates a potential breach of core operational data.

Organization profile

The Shelbyville Police Department is a local law enforcement agency responsible for maintaining public safety and combating crime in the city of Shelbyville, Tennessee, United States.

Security implications and sector considerations

This alleged breach may pose significant security risks to both department personnel and the public due to the sensitive nature of law enforcement data. The exposure of such information could compromise ongoing investigations and potentially facilitate secondary malicious activities. For a local government entity in the United States, such an incident may necessitate an investigation under state-level data protection laws and law enforcement security standards.

In the government and defense sector, the impact of a breach extends beyond simple operational downtime. The loss of confidentiality regarding criminal investigations or internal administrative processes can undermine the integrity of law enforcement actions and erode public trust in the institution. When sensitive recordings and reports are leaked, it creates a vulnerability that can be exploited by other malicious actors for further targeted attacks or social engineering campaigns.

To defend against such threats, organizations in the public sector typically focus on implementing robust security frameworks. This includes maintaining strict access controls to ensure that only authorized personnel can access sensitive systems like camera networks and crime databases. Regular auditing of device logs and the use of multi-factor authentication are standard defensive measures. Additionally, maintaining secure, offline backups and implementing network segmentation can help contain an intrusion and prevent threat actors from moving laterally through the network to reach sensitive administrative or investigative files.