Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposed
Teaser from the source
Ireland's Department of Enterprise, Tourism and Employment said on Oct 29 2026 that it found suspicious unauthorised activity on the Employment Permits Portal, and a security vulnerability during its first checks. It took the portal offline, removed access from suspected compromised administrator accounts and notified the Data Protection Commission. Information potentially exposed is basic account data: names, email addresses and account roles (employer, agent or employee); the department says broader and more sensitive personal data does not appear to be affected. The portal is expected back on Tuesday Nov 3, and permit processing continues in the meantime.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on unauthorised
Other advisories
- HighCVE-2026-14467An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an ima…
- CriticalCVE-2026-63244WizLearn Technologies LMS – Authentication Bypass Vulnerability Could Allow Unauthorised Access and Administrative Control
- HighCVE-2026-109672ERPNext: Unauthorised access to financial data due to missing validation
- HighCVE-2026-109628ERPNext: Unauthorised status modification due to missing validation
- MediumCVE-2026-102584Moodle: missing capability check allows unauthorised grade penalty recalculation
- Not ratedosv:CVE-2026-102584Moodle: missing capability check allows unauthorised grade penalty recalculation
- HighCVE-2026-12587The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generat…
- Not ratedosv:CVE-2026-66797Apache CloudStack: Unauthorised comment creation and disclosure
Source: https://pwn.watch/i/ireland-employment-permits-portal-data-breach-oct-2026