Privacy group fights European Parliament over ‘massive’ HR data breach


The European Parliament’s headache over a major human resources data breach earlier this year just won’t fade. Austria-based digital rights group noyb on Thursday said it had filed two complaints against the European Union institution for infringing the bloc’s flagship privacy law, the General Data Protection Regulation (GDPR), over a data breach discovered before the summer.

In June, Parliament notified up to 9,000 staffers that it had suffered a data breach of its recruitment application PEOPLE, which contained staffers’ ID details, birth certificates, employment history, medical records, marriage certificates — which revealed sexual orientation — and proof of work dating back 10 years.

Read more…
Source: Politico Europe


Sign up for our Newsletter


Related:

  • UK: Prison layouts reportedly leaked on dark web

    November 23, 2024

    The Ministry of Justice has said it is aware of a data breach affecting prisons in England and Wales. Confidential prison layouts had been leaked onto the dark web in the past two weeks, according to The Times. A former prison governor told the paper organised crime groups could potentially use the information to smuggle drugs ...

  • Italian food delivery app Foodinho eats another privacy fine

    November 22, 2024

    Not for the first time, food delivery firm Foodinho has been spanked by Italy’s privacy watchdog. Per Reuters, the Glovo-owned on-demand delivery app has been fined €5 million ($5.20 million) after it was found to have unlawfully processed the data of more than 35,000 riders registered on the platform. Issues identified included riders’ geolocation data being transferred ...

  • Elon Musk to British MPs: I’ll summon you, actually

    November 21, 2024

    Elon Musk is beefing with British politicians again — and they’re not impressed. The X owner and Donald Trump ally brushed off a call from the House of Commons’ science and technology committee to answer questions on his role in riots that swept the U.K. this summer. Committee chair Chi Onwurah told POLITICO this week that ...

  • Fintech giant Finastra confirms it’s investigating a data breach

    November 20, 2024

    Finastra, a London-based financial software company that serves most of the world’s top banks, has confirmed it’s investigating a data breach after a hacker claimed a compromise of the company’s internal file-transfer platform. In a statement given to TechCrunch, Finastra spokesperson Sofia Romano confirmed the fintech giant detected what it calls “suspicious activity” related to an ...

  • FrostyGoop’s Zoom-In: A Closer Look into the Malware Artifacts, Behaviors and Network Communications

    November 19, 2024

    In July 2024, the operational technology (OT)-centric malware FrostyGoop/BUSTLEBERM became publicly known, after attackers used it to disrupt critical infrastructure. The outage occurred after the Cyber Security Situation Center (CSSC), affiliated with the Security Service of Ukraine, disclosed details of an attack on a municipal energy company in Ukraine in early 2024. FrostyGoop is the ninth ...

  • Greece: Technical issue, not cyber attack, behind Hellenic Revenue Service, National Security Service, and National Police websites downtime

    November 15, 2024

    A technical network problem rather than a cyberattack was ultimately responsible for the simultaneous loss of access observed on the afternoon of Thursday, November 14, to websites of ADC and other government agencies. As competent sources told prototheme.gr, after an investigation, it was found that the temporary interruption of access to websites of the State, such ...