Wednesday 28 October 2026Compiled from published reports. Every claim links to its source.

Ireland Crime

Every case followed from the first report to the sentence, or to where the reporting stopped.

Case No. 1924Judicial review (data protection complaint) · Co. Donegal

HSE worker loses High Court challenge over data breach on work phone

Eamon McShane, a fire prevention officer with the HSE from Burtonport, Co Donegal, claimed he lost €1,400 in cryptocurrency after his personal email and cryptocurrency accounts were hacked in the summer of 2021, which he attributed to the May 2021 HSE cyberattack via his work mobile phone. He complained to the HSE for compensation, was unsatisfied with its response, and then complained to the Data Protection Commission, which refused to investigate. He brought a judicial review challenge in the High Court. In April 2025, Mr Justice Barry O'Donnell dismissed the challenge, finding the DPC did not act irrationally or outside its powers.

  1. Reportednot reported
  2. Arrestednot reported
  3. Chargednot reported
  4. In court4 Apr
  5. Verdict
  6. Sentenced
reportedhappened, not reportedlatest stagenot yet

Key facts

consolidated from all reports
What happened
Eamon McShane, a fire prevention officer with the HSE, claimed he lost €1,400 in cryptocurrency after his personal email and cryptocurrency accounts were hacked.
When
He discovered the hack in the summer of 2021 and linked it to the May 2021 HSE cyberattack.
Where
He is from Burtonport, Co Donegal.
Cause
He said his work mobile phone was the cause of the hack and acknowledged that using it for personal emails was not an acceptable use of the device.
Investigation
He complained to the HSE seeking compensation, was unsatisfied with its response, and then complained to the DPC, which refused to investigate.
In court
In April 2025, Mr Justice Barry O'Donnell in the High Court dismissed his judicial review challenge against the DPC's refusal to investigate.
Other details
The judge said he could not find that the DPC acted irrationally or outside its powers.
7 statements extracted from the articles
  • whatEamon McShane is an HSE employee and fire prevention officer. (irishtimes.com)
  • whatHe claimed he lost €1,400 in cryptocurrency as a result of the May 2021 HSE cyberattack. (irishtimes.com)
  • whatHis work mobile phone was the cause of the hack. (irishtimes.com)
  • whatHe acknowledged that using the phone for personal emails was not an acceptable use of the device. (irishtimes.com)
  • whereHe is from Burtonport, Co Donegal. (irishtimes.com)
  • whenHe discovered in the summer of 2021 that his personal email and cryptocurrency accounts were hacked. (irishtimes.com)
  • courtThe judge said he could not find that the DPC acted irrationally or outside its powers. (irishtimes.com)

The reporting

newest first
  1. 4 Apr2025
    In courtirishtimes.com, first report
    HSE worker loses court challenge over alleged data breach on work phone containing personal accounts

    Reports the High Court decision by Mr Justice Barry O'Donnell dismissing Eamon McShane's judicial review challenge against the DPC's refusal to investigate his data breach complaint.

    victim, Eamon McShane, male, irish (judged from name)Eamon McShane