Privacy group fights European Parliament over ‘massive’ HR data breach


The European Parliament’s headache over a major human resources data breach earlier this year just won’t fade. Austria-based digital rights group noyb on Thursday said it had filed two complaints against the European Union institution for infringing the bloc’s flagship privacy law, the General Data Protection Regulation (GDPR), over a data breach discovered before the summer.

In June, Parliament notified up to 9,000 staffers that it had suffered a data breach of its recruitment application PEOPLE, which contained staffers’ ID details, birth certificates, employment history, medical records, marriage certificates — which revealed sexual orientation — and proof of work dating back 10 years.

Read more…
Source: Politico Europe


Sign up for our Newsletter


Related:

  • UK: Derbyshire police officer investigated over alleged use of AI to ‘create evidence’

    June 13, 2026

    A Derbyshire police officer is being investigated over claims they used artificial intelligence (AI) to create evidence in criminal cases. The investigation is the first known case of its kind in UK criminal justice and has seen the cop removed from frontline duties. The Crown Prosecution Service (CPS) said it was “engaging with” defence lawyers and the courts over ...

  • Qilin NHS breach tally grows as Essex trust confirms stolen records

    June 9, 2026

    The patient tally from the Synnovis ransomware attack continues to grow two years later, with Mid and South Essex NHS Foundation Trust confirming it was caught up in the breach. The trust told The Register that the Synnovis breach affected about 2,380 records relating to patients who underwent specialist diagnostic testing. The disclosure follows a similar announcement by Bedfordshire ...

  • France probes compromise of gov messaging platform after account hijack

    June 9, 2026

    French officials are investigating a compromise of the government’s encrypted messaging service Tchap after attackers hijacked an account and gained access to public chat rooms. The incident came to light on June 7 when France’s National Cybersecurity Agency (ANSSI) detected suspicious activity on Tchap, the government’s homegrown messaging service used across ministries and public sector organizations. The French ...

  • Dutch cops wrest 17M devices from mystery botnet’s clutches

    May 29, 2026

    Dutch police say they dismantled a large botnet this week comprising at least 17 million infected devices. After being tipped off by a researcher at the Netherlands’ National Cyber Security Centre (NCSC-NL), police began an investigation, which resulted in the discovery of 200 servers underpinning the botnet’s infrastructure located in the country. Cybercrime specialists at The Hague ...

  • UK Visa Portal exposed thousands of applicants’ passports and selfies — then called the lawyers on us

    May 27, 2026

    A website called UK Visa Portal publicly exposed thousands of passports and selfie photos of applicants who paid the site to obtain a U.K. immigration visa. An anonymous person notified TechCrunch about the security lapse, saying that the website was exposing at least 100,000 documents from people who uploaded their passports and selfies to the website ...

  • The Strategic Importance of Digital Sovereignty in 2026

    May 18, 2026

    Digital sovereignty has become a priority as concerns over data privacy, data protection, and geopolitical risk intensify. The concept centres on giving data owners full control over their digital assets, infrastructure, and the legal frameworks governing them. While Europe leads demand for sovereign solutions, interest is rising globally as cyberthreats and geopolitical tensions grow. In 2026, ...