Cybersecurity Incident: Your Questions
From Office of the Information Commissioner (OIC)
Published on
Last updated on
From Office of the Information Commissioner (OIC)
Published on
Last updated on
Q. What has happened?
We are responding to a cybersecurity incident involving unauthorised access to our ICT systems. It is understood that this is a financially motivated ransomware attack and a forensic investigation is ongoing. As a precaution, some systems have been taken offline to contain the threat while the incident is investigated.
Q. Has my data been accessed?
We are working with the National Cyber Security Centre (NCSC) and external cyber incident response specialists to assess the nature and extent of the incident and to support containment and recovery. There is no evidence at this time that any data has been taken.
For general guidance relating to data protection, please see the Data Protection Commission website . For general advice relating to cyber security, please see the National Cyber Security Centre website .
Q. What action has been taken to protect my data?
The priority of the Office is to restore services safely, and to protect the people who rely on our services.
We are working with the National Cyber Security Centre (NCSC) and external cyber incident response specialists to assess the nature and extent of the incident and to further support containment and recovery. The NCSC has activated its incident response plan and has put in place enhanced monitoring to support our Office.
The incident has also been notified to the Data Protection Commissioner and An Garda Síochána.
To further protect individuals, we have taken legal steps, including securing an injunction from the High Court to restrict any use or publication of potentially stolen information.
Q. What services are impacted?
Affected services at the OIC include our telephone service. It is also impacting the ability of the Office to progress existing cases at this time.
Q. I currently have a case with the OIC. What do I need to do?
We appreciate your patience while we are doing everything possible to resolve the matter and restore our services. You do not need to contact us at this stage. Updates will be provided on the OIC website as verified information becomes available.
Our email system is secure. If you wish to contact us, please respond to the latest email correspondence from this Office if you have a case with us.
Q. I wish to submit a new application to the OIC. Is this service available?
If you wish to submit a new application, please use the webform that is available on our website at www.oic.ie.