Assessment of Blue Leaks data
I'm former command staff at a major southern US municipal police department. I found quite a lot of documents from them. Here's my assessment:
This was not a high-level penetration, at least of my old agency (only one I looked at because I would recognize highly confidential documents from less protected ones). While the documents did contain some sensitive information, I did not see drafts of investigative reports, interrogation details and other documents I will not name which would have had a deeper development of information related to investigations, techniques and procedures.
Most of the documents appear to be drafts of training flyers, some low level departmental information such as FOUO situation reports from the NC Fusion Center and others, as well as some summary write ups by task force officers to the Federal agencies to which they're assigned. Most of that info you can get in press releases.
I did see desk phone and email lists, stupidly.
And that leads me to believe that the information I'm looking at, at least for my old agency, was sucked from C drives on various computers.
''If I had to bet money, knowing how the city government where I worked at is structured, I would say it's very likely someone in the city's IT department remoted into a number of C drives and copied them.
I didn't see any information that came from dedicated LE database storage. FWIW.