Staff documents stolen in EU Parliament data breach
The European Parliament is notifying its staff that a threat actor breached its systems and extracted sensitive data.
Earlier this year, threat actors breached the PEOPLE recruitment system used by the European Parliament to hire non-permanent staff.
The attack was discovered on April 25.
On May 22, the European Parliament began notifying its staff of the breach, giving details of what it entails. According to the email, the data stolen in the breach includes identification documents, passports, work experience and criminal record extracts, military obligations, declarations of honour, education, contracts and rights documents. It is believed that all documents have been affected.
According to a spokesperson for the European Parliament, the PEOPLE HR tool has since been disabled while investigations are carried out.
“After analysis, all active and non-active users received detailed information on 05/22, in accordance with the recommendation of the European Data Protection Supervisor (EDPS),” a spokesperson told an EU publication. Euroactiv.
The European Parliament has not revealed how many people were affected by the breach, nor is it clear how the threat actor gained access. No individual or group has come forward publicly denouncing the violation.
