Cunning computer hackers have hijacked the Home Office crime reduction website and used it to carry out an elaborate online scam.
The fraudsters set up a fake page on the website then sent millions of web users a "phishing" email purporting to be from an Italian bank, asking customers to visit the page and confirm their bank details.
Anyone who typed in their password left themselves open to money being stolen from their account.
The security breach began last Sunday and was not resolved until the following morning.
Jacques Erasmus, of internet security firm PrevX, who spotted the fraud, said: "This is very embarrassing for the Home Office. It is a bit like having a mugger hiding in the local police station nicking people's wallets when they come in."
He said the fraudsters might have targeted the crime reduction website in ordered to show off or "stick it to the man".
The Home Office is investigating. A spokeswoman said: "The Home Office takes security of its information very seriously and a review of the security of our websites is already underway."