The force said the attack could have led to staff information being "accessed or compromised".