Ireland HSE hit by cyberattack affecting recruitment data
The Health Service Executive (HSE) said on 9 June 2023 that information on up to 20 people involved in its recruitment processes was likely accessed in a cyberattack involving its external provider, EY. The HSE said it became aware of the attack on the evening of Thursday 8 June, after EY was alerted to an attack on the MoveIT product used for an HSE recruitment automation project. The data involved is names, addresses and mobile numbers, plus recruitment panel places and general information on the posts, and the HSE said no patient data was involved. Reports say the Clop hacking gang is understood to be behind the attack, and no arrest or charge has been reported. The latest development is that the HSE has contacted the Data Protection Commission and will contact the affected individuals shortly.
- Reported9 Jun
3 reports - Arrested
- Charged
- In court
- Verdict
- Sentenced
Key facts
consolidated from all reports- What happened
- The HSE said information relating to up to 20 people involved in recruitment processes was likely accessed.
- The data involved includes names, addresses and mobile numbers, place on the recruitment panel and general information on the posts.
- The HSE said payroll was also targeted in the attack, while no patient data was involved.
- Where
- The HSE said the attack was not on its own IT system, while the Irish Mirror reported that HSE computers had been hit.
- When
- The HSE said it became aware of the attack on the evening of Thursday 8 June, and its statement was issued on 9 June.
- Cause
- EY was alerted to a cyberattack on the MoveIT technology product, which the HSE's recruitment automation project was using.
- Other details
- The HSE described the attack as criminal in nature and international in scale.
- The HSE said there was no evidence so far of the data appearing on the dark web and that its exposure appears to be quite small.
- It is understood the Clop hacking gang is behind the attack, which the Irish Mirror reported as a cyber-crime gang.
- The Irish Mirror reported that the HSE was crippled by a massive attack in May 2021 that cost over €50 million to repair.
- Investigation
- The HSE is working with relevant authorities, has contacted the Data Protection Commission and will contact affected individuals shortly.
- Charges
- No arrest or charge has been reported.
- In court
- No court proceedings have been reported.
- Sentence
- No sentence has been reported.
25 statements extracted from the articles
- whatThe HSE said information relating to up to 20 people involved in recruitment processes was likely accessed in a cyber attack involving EY. (rte.ie)
- whatThe data involved includes names, addresses, mobile numbers, place on the recruitment panel and general information on the posts being recruited. (rte.ie)
- whatThe HSE's computers were hit by a cyberattack described as criminal and international in scale. (irishmirror.ie)
- whatInformation relating to no more than 20 individuals involved in recruitment processes was likely accessed. (irishmirror.ie, corkbeo.ie)
- whatThe HSE was hit by a cyberattack that it described as criminal in nature and international in scale. (corkbeo.ie)
- whatThe data accessed consists of names, addresses and mobile numbers. (corkbeo.ie)
- whatPayroll was also targeted in the attack on the HSE's IT systems. (corkbeo.ie)
- whatNo patient data was understood to have been compromised. (corkbeo.ie)
- whenThe HSE became aware of the attack the evening before its statement. (rte.ie)
- whenThe HSE became aware of the attack on the evening of Thursday 8 June. (irishmirror.ie)
- causeEY was alerted to a cyber attack on the MoveIT technology product, which the HSE's recruitment automation project was using. (rte.ie)
- causeThe attack was on the MoveIT technology product used by external partner EY for a recruitment automation project. (irishmirror.ie)
- causeThe attack was on the MoveIT technology product used by an external partner, EY, on a recruitment project. (corkbeo.ie)
- investigationThe HSE is in contact with relevant authorities, including the Data Protection Commission, and will contact the affected individuals shortly. (rte.ie)
- investigationThe HSE is in contact with relevant authorities and is informing the Data Protection Commission. (irishmirror.ie)
- investigationThe HSE is working with relevant authorities and has contacted the Data Protection Commission. (corkbeo.ie)
- otherThe HSE described the attack as criminal in nature and international in scale. (rte.ie)
- otherThe HSE said no patient data was involved and the attack was not on the HSE's IT system. (rte.ie)
- otherThe HSE said there was no evidence so far of the data appearing on the dark web. (rte.ie)
- otherThe HSE said its exposure appears to be quite small. (rte.ie)
- otherIt is understood that the Clop hackers are behind the attack. (irishmirror.ie)
- otherThe data on the recruitment panels includes names, addresses, mobile numbers, place on the panel and general information on the posts. (irishmirror.ie)
- otherThe HSE has said payroll was also targeted in the attack. (irishmirror.ie)
- otherThe HSE said no patient data was involved. (irishmirror.ie)
- otherIt is understood that the Clop hacking gang is behind the attack. (corkbeo.ie)
The reporting
newest first- 9 Jun2023HSE hit by international cyberattack that could impact people in Cork
Describes the HSE cyberattack, the data involved, the suspected Clop gang link and the contact with the Data Protection Commission. Also notes that payroll was targeted and no patient data was reportedly compromised.
- 9 Jun2023Russian cyber-crime gang understood to be behind HSE cyberattack
Reports a specific cyberattack on the HSE via the MoveIT product used by EY, with the HSE's account of the data involved and the response.
- 9 Jun2023HSE impacted by cyber attack involving outside provider
Reports that the HSE is likely affected by a cyber attack on the MoveIT product used by EY, exposing recruitment data for up to 20 people. No suspect or arrest is mentioned.