Municipality of Patras reports unauthorized access to information systems

The Municipality of Patras reported an unauthorized access incident involving its information systems on September 20, 2026. An unauthorized third party gained access by using user credentials, leading to the download of a limited number of electronic documents.

Technical investigations indicate that the breach was not widespread and did not affect the municipality's entire information system or all citizen data. The compromised documents primarily consist of official correspondence and data belonging to employees, service executives, and five citizens who had submitted requests to the municipality.

In response, the municipality implemented several security measures, including disabling affected accounts, canceling active access sessions, and enabling two-factor authentication (2FA) for users of the relevant system. Affected employees and citizens have been notified to mitigate risks such as phishing, identity theft, or fraud.