Supply chain β›“ Supply Chain

Fermanagh and Omagh District Council Third-Party Breach (May 2023)

πŸ“… 2023-05-01 🏒 Evide Impact Limited
Primary Source β†—

Incident Details

Thousands impacted by Fermanagh and Omagh District Council programme data breach. OVER 2,000 people have been affected by a data-breach because of their participation in a scheme run by Fermanagh and Omagh District Council. The affected people include participants on the FODC employability initiative programme, Anspire from 2015 until March 2023. When asked by The Impartial Reporter how many were impacted by this cyber security incident, a spokeperson from FODC confirmed that 2,469 individuals were impacted and no other FODC schemes were impacted. A concerned Aspireparticipant contacted this newspaper on Monday morning regarding the cyber-crime and subsequent data breach. He warned that some of the data entered on the system by participants included; names, addresses, telephone numbers, email addresses, dates of birth and national insurance numbers. Third-party company: Evide Impact Limited.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Evide Impact Limited
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-05-01 Breach occurred
  2. 2023-04-22 Publicly disclosed