Privacy group fights European Parliament over ‘massive’ HR data breach


The European Parliament’s headache over a major human resources data breach earlier this year just won’t fade. Austria-based digital rights group noyb on Thursday said it had filed two complaints against the European Union institution for infringing the bloc’s flagship privacy law, the General Data Protection Regulation (GDPR), over a data breach discovered before the summer.

In June, Parliament notified up to 9,000 staffers that it had suffered a data breach of its recruitment application PEOPLE, which contained staffers’ ID details, birth certificates, employment history, medical records, marriage certificates — which revealed sexual orientation — and proof of work dating back 10 years.

Read more…
Source: Politico Europe


Sign up for our Newsletter


Related:

  • Telecom giant Orange warns of disruption amid ongoing cyberattack

    July 29, 2025

    Orange, a French telecommunications giant and one of the largest phone providers in the world, announced on Monday that it was the victim of an unspecified cyberattack. In the announcement, the company said that it detected a cyberattack “on one of its information systems” on July 25, and that it proceeded to “isolate potentially affected services ...

  • Russia: Aeroflot cancels dozens of flights after hacker attack paralyzes IT systems

    July 28, 2025

    Russia’s Aeroflot airline has cancelled 49 round-trip flights to and from Moscow due to an IT system failure, the air carrier reported. The press service of the Prosecutor General’s Office of Russia said that the airline’s information systems were brought down by a hacker attack. The carrier warned of adjustments to its flight schedule, including delays ...

  • Digital Compliance Alert: UK Online Safety Act and EU Digital Services Act Cross-Border Impact Analysis

    July 26, 2025

    As of July 25, 2025, all sites and apps that allow pornography will need to have strong age checks in place, to make sure children can’t access that or other harmful content. This represents the most significant change to how adults access online content in the UK since the internet’s mainstream adoption. Gone are the days ...

  • Ukraine: Authorities expose large-scale network of call centres involved in investment fraud

    July 25, 2025

    In Ukraine, the activities of organized criminal groups that committed financial fraud under the guise of call centers have been exposed and stopped. In Kyiv, Lviv region, Lutsk, and Odesa region, networks that defrauded citizens both within the country and abroad have been neutralized. This was reported by the Office of the Prosecutor General, writes ...

  • Swedish citizen and organization data exposed online

    July 24, 2025

    An enormous database, containing millions of highly sensitive information on Swedish citizens, was sitting on the open internet, available for anyone who knew where to look. Cybernews researchers recently uncovered a misconfigured Elasticsearch server which they described as a “goldmine of business intelligence data”, containing hundreds of millions of highly detailed records belonging to Swedish individuals ...

  • Key figure behind XSS.IS forum arrested in Ukraine

    July 23, 2025

    A long-running investigation led by the French Police and Paris Prosecutor, in close cooperation with their Ukrainian counterpart and Europol, has led to the arrest of the suspected administrator of xss.is, one of the world’s most influential Russian-speaking cybercrime platforms. The forum, which had more than 50 000 registered users, served as a key marketplace for ...