| Date | March 2023 (2023-03) – April 17, 2023 (2023-04-17) (disclosure) |
|---|---|
| Location | Derry, Northern Ireland (Evide Headquarters) |
| Type | Data breach, ransomware attack |
| Cause | Ransomware |
| Target | Evide data storage |
| Perpetrator | Unknown |
| Outcome | Data breach, investigation by PSNI and Gardaí, potential investigation by Data Protection Commissioner |
| Inquiries | Police Service of Northern Ireland, Garda National Cyber Crime Bureau |
TheEvide data breach was adata breach caused byransomware inNorthern Ireland.[1][2][3][4][5][6]
Evide is a company based inDerry which specialises in data storage and analysis for charities.[2] Evide manages data for around 140 organisations.[2] At least four of the affected organisations deal with survivors ofrape orsexual abuse.[6]
ThePolice Service of Northern Ireland has confirmed that it was contacted in March about a cyber attack and it was investigating.[3]Gardaí are cooperating with them, including theGarda National Cyber Crime Bureau.[3]
The charity One in Four was told of the breach on 5 April 2023.[2]
The news of the breach was made public on 17 April 2023.[1][2][3][4][5][6][7]
A number of organisations were affected, including the Dublin-based charity One in Four, which supports adult survivors of child sexual abuse. Maeve Lewis, CEO of One in Four, toldRTÉ News that personal data, including phone numbers and email addresses had been stolen. However, letters and reports to child protection services were not taken. About 1000 people who had been engaged with One in Four might be affected. One in Four contacted Evide to ask them to take legal action against the attackers as One in Four was not directly attacked.[1][2][3][4][5]
Orchardville, an organisation based in Northern Ireland, said that it was not sure if any of its data was affected.[3][4]
Charities affected could be investigated by theData Protection Commissioner.[2]
Ossian Smyth said the investigation was in early stages and urged caution as some stories circulating may not be true.[1]