Evide data breach
The Evide data breach was a data breach caused by ransomware in Northern Ireland.[1][2][3][4][5][6]
Evide
Evide is a company based in Derry which specialises in data storage and analysis for charities.[2] Evide manages data for around 140 organisations.[2] At least four of the affected organisations deal with survivors of rape or sexual abuse.[6]
Events
Breach
The Police Service of Northern Ireland has confirmed that it was contacted in March about a cyber attack and it was investigating.[3] Gardaí are cooperating with them, including the Garda National Cyber Crime Bureau.[3]
The charity One in Four was told of the breach on 5 April 2023.[2]
Disclosure
The news of the breach was made public on 17 April 2023.[1][2][3][4][5][6]
Impact
A number of organisations were affected, including the Dublin-based charity One in Four, which supports adult survivors of child sexual abuse. Maeve Lewis, CEO of One in Four, told RTÉ News that personal data, including phone numbers and email addresses had been stolen. However, letters and reports to child protection services were not taken. About 1000 people who had been engaged with One in Four might be affected. One in Four contacted Evide to ask them to take legal action against the attackers as One in Four was not directly attacked.[1][2][3][4][5]
Orchardville, an organisation based in Northern Ireland, said that it was not sure if any of its data was affected.[3][4]
Charities affected could be investigated by the Data Protection Commissioner.[2]
Reactions
Ossian Smyth said the investigation was in early stages and urged caution as some stories circulating may not be true.[1]
See also
References
- ↑ 1.0 1.1 1.2 1.3 Clarke, Vivienne; Sheehy, Mairead (2023-04-17). "Abuse victims warned over 'dodgy emails' following ransomware attack". Irish Examiner. https://www.irishexaminer.com/news/arid-41118247.html.
- ↑ 2.0 2.1 2.2 2.3 2.4 2.5 2.6 Brennan, Cianan (2023-04-17). "Charities for abuse victims may face sanctions over data breach". Irish Examiner. https://www.irishexaminer.com/news/arid-41118562.html.
- ↑ 3.0 3.1 3.2 3.3 3.4 3.5 "Cyber attack: Data from charities stolen in ransomware attack". BBC News. 2023-04-17. https://www.bbc.com/news/uk-northern-ireland-65297324.
- ↑ 4.0 4.1 4.2 4.3 Boland, Lauren (2023-04-17). "Investigation underway into cyber attack affecting charities for sexual assault survivors". TheJournal.ie. https://www.thejournal.ie/investigation-cyber-attack-ireland-charities-6045882-Apr2023/.
- ↑ 5.0 5.1 5.2 McGreevy, Ronan; Clarke, Vivienne (2023-04-17). "Sex abuse survivors' charity One in Four victim of data breach". Irish Times. https://www.irishtimes.com/crime-law/2023/04/17/sex-abuse-survivors-charity-one-in-four-victim-of-data-breach/.
- ↑ 6.0 6.1 6.2 Reynolds, Paul (2023-04-17). "Abuse victims' data stolen in ransomware attack". https://www.rte.ie/news/2023/0417/1377329-data-ransomware/.
External links
- Evide - home page of the targeted company
 |  |
