Ireland is the most vulnerable country for unsecured internet CCTV systems out of 35 European states studied \u2014 exposing organisations and the State to potential infiltration by criminals and hostile states, it has emerged.<\/p>\n
The assessment comes after Dutch intelligence agencies issued a public warning that Russian security services were \u201csystematically conducting\u201d digital espionage operations via cameras that are connected to the internet.<\/p>\n
In a joint advisory, the civilian and military intelligence agencies of the Netherlands said not only was its systems being targeted, but also EU and Nato states.<\/p>\n
An analysis of the advisory by global cyber company Censys identified more than 87,000 internet cameras across 35 European countries, which it said had a \u201cpotentially exploited vulnerability\u201d, that could be accessed by external hackers.<\/p>\n
It found Ireland had 13,350 internet cameras in operation (18th highest out of the 35 countries). Of these, some 4,918 were assessed as being vulnerable to hacking.<\/p>\n
This was the sixth highest of the 35 states in absolute numbers, which was dominated by the large-population countries, such as the UK, Italy, France, and Germany.<\/p>\n
In terms of the proportion of its cameras that were vulnerable, Ireland was the highest, by some distance, with 37% of cameras unsecured.<\/p>\n
This is nearly three times greater than the next highest countries, such as France and Italy, both at 13%, and compares to 6% in the UK and just 4% in the Netherlands \u2014 the country that issued the warning.<\/p>\n
In the analysis by Censys, its principal security researcher Martijn Grooten said the Dutch warning again highlighted the vulnerability of these cameras, even when the devices themselves may not reveal \u201cany interesting data\u201d.<\/p>\n
He said the potential impact went beyond a threat to cameras at military installations, which was the focus of the Dutch advisory, to include \u201can unpatched camera at a manufacturing plant\u2019s loading dock, an energy utility\u2019s substation perimeter or a bank branch\u2019s exterior\u201d.<\/p>\n
Mr Gooten said: \u201cThey\u2019re [the cameras] a live feed of physical operations, revealing shift changes, shipping schedules, security patrol timing, or which entrances go unguarded overnight.\u201d\u00a0<\/p>\n
He said spying did not require breaching a corporate network first and a single unpatched camera \u201ccan hand a competitor, criminal group, or state actor, months of low-cost reconnaissance on how the physical site actually runs\u201d.<\/p>\n
Irish cyber expert Brian Honan said the risk posed by internet cameras was not new and previous concerns were also expressed about other smart devices or internet-enabled devices, such as connected baby monitors.<\/p>\n
![\"Irish](\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2026\/08\/5177350_14_articleinline_484516985.jpg\" "\\"Irish")
Irish cyber expert Brian Honan said hackers could seek to access cameras for a range of reasons: ‘They can use them to observe who is accessing the facility, identify patterns of access for individuals that they may want to target, gather information about the activity the camera is monitoring, or to turn cameras on and off to facilitate physical attacks.’<\/p>\n
But in relation to the Dutch advisory and the Censys analysis, he said: \u201cThis is something that Ireland could be vulnerable to, particularly if organisations are not installing internet-connected cameras securely and are not regularly maintaining them to keep their software and firmware updated to protect against any vulnerabilities.\u201d\u00a0<\/p>\n
\u201cIntelligence services, and indeed criminals, will try to access internet-connected cameras using the default login credentials that manufacturers may configure into the devices, breaking into the cameras using weak or stolen login credentials, or exploiting software vulnerabilities, or weaknesses, to connect to the devices and control them.\u201d\u00a0<\/p>\n
He said this was illustrated when Russian security services hacked into EU border cameras, which was detailed in a study published last year by the Robert Lansing Institute, a think tank.<\/p>\n
This study found the Russian agencies were targeting surveillance and traffic camera systems to gain intelligence on troop movements, border security, and also critical infrastructure.<\/p>\n
In addition, it said these hacks also served to \u201cintimidate EU states and weaken public trust in their governments\u2019 ability to ensure national security” and could form part of a wider hybrid attack.<\/p>\n
Mr Honan said hackers could seek to access cameras for a range of reasons: \u201cThey can use them to observe who is accessing the facility, identify patterns of access for individuals that they may want to target, gather information about the activity the camera is monitoring, or to turn cameras on and off to facilitate physical attacks.\u201d\u00a0<\/p>\n
He said there was a potential wider threat: \u201cAlternatively, if the cameras are connected to an organisation’s network, the attacker can use the compromised camera as a launchpad for attacks against other systems on the network.\u201d\u00a0<\/p>\n
Mr Honan said if cameras needed access from the internet to facilitate the likes of remote monitoring by a security team, then access to the cameras \u201cshould be restricted using multifactor authentication if it is available, and restricting access to the cameras to known and trusted internet connections\u201d.<\/p>\n
In response to queries about the Dutch warning and what steps Irish authorities had taken to counter the threat, the Department of Justice said the National Cyber Security Centre (NCSC) was \u201caware\u201d of the advisory.<\/p>\n
The department\u2019s statement said: \u201cThe NCSC does not comment on operational matters or on its cyber threat intelligence capacity.\u201d\u00a0<\/p>\n
But the statement goes on to point out any device connected to the internet wasa \u201ccapable of being exploited\u201d and internet-connected CCTV cameras were no exception.<\/p>\n
\u201cThe NCSC advises users and organisations to keep such devices updated, to change default settings and credentials, and to restrict their exposure to the public internet to that required for their function.\u201d\u00a0<\/p>\n
The centre said it provided guidance for organisations on its website.<\/p>\n
It added this matter would also be covered in a forthcoming EU regulation: \u201cUnder the EU Cyber Resilience Act, obligations on manufacturers to report actively exploited vulnerabilities and severe incidents take effect from September 2026, with the fuller set of product security requirements applying from 2027.\u201d\u00a0<\/p>\n
In a brief statement, Garda HQ said: \u201cAn Garda S\u00edoch\u00e1na is aware of the potential exploitation of such devices. An Garda S\u00edoch\u00e1na does not comment on matters of national or international security.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Ireland is the most vulnerable country for unsecured internet CCTV systems out of 35 European states studied \u2014…\n","protected":false},"author":2,"featured_media":581491,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[29662,61,60,43],"class_list":["post-581490","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ireland","tag-cybercrime","tag-ie","tag-ireland","tag-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/581490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=581490"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/581490\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/581491"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=581490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=581490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=581490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}