# Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposed · pwn.watch > Ireland's Department of Enterprise, Tourism and Employment said on Oct 29 2026 that it found suspicious unauthorised activity on the Employment Permits Portal, and a security vulnerability during its first checks. It took the portal offline, removed access from suspected compromised administrator accounts and notified the Data Protection Commission. Information potentially exposed is basic account data: names, email addresses and account roles (employer, agent or employee); the department says broader and more sensitive personal data does not appear to be affected. The portal is expected back on Tuesday Nov 3, and permit processing continues in the meantime. Page: https://pwn.watch/i/ireland-employment-permits-portal-data-breach-oct-2026 · generated 2026-10-31T00:40:58.390Z ## Status - Severity: medium · status: live · patch: partial - Product: Employment Permits Online portal (Department of Enterprise, Tourism and Employment, Ireland) - Started: 2026-10-29 ## Follow this incident - RSS (one item per update): https://pwn.watch/i/ireland-employment-permits-portal-data-breach-oct-2026/feed.xml - JSON Feed: https://pwn.watch/i/ireland-employment-permits-portal-data-breach-oct-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/ireland-employment-permits-portal-data-breach-oct-2026.json - This file: https://pwn.watch/i/ireland-employment-permits-portal-data-breach-oct-2026/llms.txt ## Updates (newest first) - 2026-10-29: The department says it identified suspicious unauthorised activity on the Employment Permits Portal and a security vulnerability, suspends registrations and takes the portal offline, removes access from suspected compromised administrator accounts, adds firewall restrictions and notifies the Data Protection Commission. It expects the portal to reopen on Nov 3. (https://enterprise.gov.ie/en/publications/employment-permits-portal-personal-data-security-incident.html) - 2026-10-29: The Data Protection Commission confirms it received a breach notification and is assessing it; the department says the incident is not linked to the recent PHP vulnerabilities. (https://www.rte.ie/news/ireland/2026/1029/1597264-data-breach-employment-permit/) ## Fix brief # Security brief: Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposed Source: https://pwn.watch/i/ireland-employment-permits-portal-data-breach-oct-2026 · status: live · severity: medium · updated Oct 30, 2026, 21:27 UTC ## Patch status **PARTIALLY PATCHED: some fixes exist, but not every affected branch/product is covered. Check carefully and apply mitigations where no fix exists.** ## What it is Ireland's Department of Enterprise, Tourism and Employment said on Oct 29 2026 that it found suspicious unauthorised activity on the Employment Permits Portal, and a security vulnerability during its first checks. It took the portal offline, removed access from suspected compromised administrator accounts and notified the Data Protection Commission. Information potentially exposed is basic account data: names, email addresses and account roles (employer, agent or employee); the department says broader and more sensitive personal data does not appear to be affected. The portal is expected back on Tuesday Nov 3, and permit processing continues in the meantime. Severity detail: Government portal offline after confirmed unauthorised activity; potentially exposed data limited to names, emails and account roles so far; number of affected users not disclosed - Product: Employment Permits Online portal (Department of Enterprise, Tourism and Employment, Ireland) ## Affected versions - Not specified in the data. Check the advisories below. ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix No fixed version is listed. Follow the vendor advisory below. ## Mitigations The data marks this as partial. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Specific notes There is nothing to patch. Employment permit users in Ireland should expect phishing that uses this incident as a lure; the department says it never asks for personal data by email or text. Re-check the DETE notice for the affected-user count, the vulnerability and the Nov 3 reopening; close once the portal is back and the investigation reports. ## Latest updates - Oct 29, 2026: The department says it identified suspicious unauthorised activity on the Employment Permits Portal and a security vulnerability, suspends registrations and takes the portal offline, removes access from suspected compromised administrator accounts, adds firewall restrictions and notifies the Data Protection Commission. It expects the portal to reopen on Nov 3. - Oct 29, 2026: The Data Protection Commission confirms it received a breach notification and is assessing it; the department says the incident is not linked to the recent PHP vulnerabilities. ## Advisories - [Employment Permits Portal – Personal Data Security Incident](https://enterprise.gov.ie/en/publications/employment-permits-portal-personal-data-security-incident.html) (Department of Enterprise, Tourism and Employment) ## Write-ups & news - [Suspected data breach of employment permit online system](https://www.rte.ie/news/ireland/2026/1029/1597264-data-breach-employment-permit/) - [Ireland: Employment Permits Portal Offline Following Unauthorized Activity](https://www.fragomen.com/insights/ireland-employment-permits-portal-offline-following-unauthorized-activity.html) --- Machine-readable: https://pwn.watch/i/ireland-employment-permits-portal-data-breach-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.