Fiosrú records 38 data breaches in Ireland

Fiosrú, the oversight body for the Irish Garda, recorded 38 data breaches during a period spanning 2025 and the first half of 2026. The incidents, disclosed via Freedom of Information requests, involved various lapses in data handling during the organization's transition from the Garda Síochána Ombudsman Commission.

Most breaches were classified as low risk, involving the accidental emailing of correspondence or official documents to incorrect recipients. However, one high-risk incident involved an email containing sensitive personal information—including names, addresses, ages, and details regarding allegations—being sent to an unintended party. This specific breach required mandatory reporting to the Data Protection Commission (DPC).

Additionally, a Fiosrú employee left a bag containing a laptop, notebook, and documents in a Dublin taxi. While the bag was recovered later that day and there was no evidence of unauthorized access, the incident was also reported to the DPC. The organization noted that its laptops utilize encrypted hard drives, passcode technology, and two-factor authentication to mitigate such risks.