{"id":456559,"date":"2026-05-19T11:49:14","date_gmt":"2026-05-19T11:49:14","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/456559\/"},"modified":"2026-05-19T11:49:14","modified_gmt":"2026-05-19T11:49:14","slug":"revenue-staff-are-warned-about-passwords-after-137-employees-caught-up-in-data-breach-the-irish-times","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/456559\/","title":{"rendered":"Revenue staff are warned about passwords after 137 employees caught up in data breach \u2013 The Irish Times"},"content":{"rendered":"

Staff at Revenue<\/a> were warned under no circumstances to use their work password anywhere else after 137 employees were caught up in a data breach<\/a> involving a supplier.<\/p>\n

The names, email addresses, job titles, phone numbers and office addresses of the Revenue workers were reported to be at risk of exposure during a ransomware attack on the technology<\/a> company Pitney Bowes<\/a>.<\/p>\n

An internal Revenue email stated negotiations undertaken in an attempt to contain the breach \u201cdid not go well\u201d and that some records had already been published online.<\/p>\n

It said Pitney Bowes was a supplier of franking machines for the Revenue Commissioners.<\/p>\n

In the email to all staff in late April, Revenue\u2019s security team said home addresses were unlikely to have been compromised unless people had one of the machines at their home.<\/p>\n

The message read: \u201cI would assume that they only have Revenue-related information and not anything related to your personal life.\u201d<\/p>\n

It said affected employees could see an increase in the number of scam emails and phone calls in the future.<\/p>\n

Revenue security said no passwords were stolen but that it was a good reminder for everybody to be careful.<\/p>\n

\u201cEveryone already knows not to use their Revenue password for external sites, even for trusted suppliers, so even if there were passwords it wouldn\u2019t be something for us to worry about, would it?\u201d the message read.<\/p>\n

[\u00a0Fears mount that Munster TU students\u2019 personal data compromised in cyberattackOpens in new window<\/a>\u00a0]<\/p>\n

The email stated that once the names of the 137 staff affected were confirmed, they would be contacted directly to discuss how they could be at increased risk of scam efforts and \u201csocial engineering attacks\u201d.<\/p>\n

Revenue\u2019s IT security said they were using the incident as an opportunity to highlight the risks involved in cybersecurity.<\/p>\n

The security team said: \u201cDo not reuse passwords or at the very least do not use your Revenue password (or anything like it). Limit any data shared to the minimum required.<\/p>\n

\u201cAlways be alert for attackers pretending to be from a trusted source.\u201d<\/p>\n

Staff were also warned to be vigilant of any unusual requests involving suppliers, using an example of a company submitting an invoice that was three times its normal average.<\/p>\n

Asked about the breach, a spokesman for Revenue said Pitney Bowes provided Revenue with various services related to postal and logistics operations.<\/p>\n

He said Revenue had been alerted to the breach and briefed by the National Cyber Security Centre (NCSC). The spokesman said the data exposed could contain the information that was provided when registering for an account.<\/p>\n

\u201cIt is not known at this stage if each account provided full or partial details at the registration stage,\u201d he said. \u201cAll staff on the list have been informed and advised on appropriate precautions against potential phishing activities.\u201d<\/p>\n

The spokesman said no taxpayer data of any description was involved in the breach and that Revenue continuously monitored for suspect activity. He said there was no requirement to inform the State\u2019s data privacy watchdog, the Data Protection Commission, as this was \u201cnot a breach of Revenue systems\u201d.<\/p>\n","protected":false},"excerpt":{"rendered":"Staff at Revenue were warned under no circumstances to use their work password anywhere else after 137 employees…\n","protected":false},"author":2,"featured_media":456560,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[72,3312,61,60,11522],"class_list":["post-456559","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-cybersecurity","tag-ie","tag-ireland","tag-revenue-commissioners"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/456559","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=456559"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/456559\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/456560"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=456559"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=456559"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=456559"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}