[CLSTR]
< Back to situation

[REVISION HISTORY]

Cyberattacks on Portuguese public sector databases

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-10-24 11:02 UTC → 2026-10-24 16:08 UTC · added removed

A series of cyberattacks has targeted Portuguese public sector databases, resulting in the exposure of significant amounts of personal information. In early October, a breach occurred via a development server belonging to an IT service provider. This attack exposed approximately 120 gigabytes of unclassified data related to Portuguese intelligence agencies, including the Sistema de Informações da República Portuguesa (SIRP), the Serviço de Informações de Segurança (SIS), and the Serviço de Informações Estratégicas de Defesa (SIED). The leaked dataset, consisting of over 312,000 files, reportedly contains personal details such as names, tax IDs, and contact information linked to professional applications. Later in the month, the National Emergency and Civil Protection Authority (ANEPC) confirmed a separate attack on the National Census of Portuguese Firefighters (RNBP) database. Hackers accessed The breach resulted in the unauthorized access and copying of sensitive personal data information, including full names, citizen card numbers, tax identification, social security numbers, health user IDs, driver's licenses, marital status, dates of birth, contact details, addresses, images, and blood types. While the Liga dos Bombeiros Portugueses (LBP) noted that the system does not store banking information, the breadth of the exposed data is significant. In response, the RNBP application was suspended while suspended. The ANEPC, the National Cybersecurity Center (CNCS) (CNCS), and the National Internal Security Network (RNSI) work are working to develop enhanced reinforce security measures. systems. Authorities have issued an alert to regional commands and firefighters to exercise extreme caution regarding potential phishing, smishing, vishing, and quishing attempts involving suspicious links or unexpected communications.

Versions

  1. 2026-10-24 16:08 UTC Cyberattacks on Portuguese public sector databases
  2. 2026-10-24 11:02 UTC Cyberattacks on Portuguese public sector databases

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.