Personal details of 37,000 Eir customers exposed after the theft of a laptop
26.8.18 securityaffairs Incindent

Personal details of 37,000 Eir customers exposed after the theft of a laptop, including names, email addresses, phone numbers and account numbers.
Eir, the fixed, mobile and broadband telecommunications company of Ireland, has suffered a data breach this week.

Personal details of 37,000 Eir customers have been exposed according to the telecommunications company.

The root cause of the data leak is the theft offsite of an unencrypted laptop containing the customers’ data. Exposed records include names, email addresses, phone numbers and Eir account numbers.

“eir has reported a data breach of personal details for up to 37,000 customers to the Data Protection Commissioner. The data consists of names, email addresses, phone numbers and eir account numbers.” states the data breach notification published by the company on its official website.

“This is a result of the theft of one laptop, which was stolen off premises. No other personal or financial data relating to customers was stored on the laptop in question.”

According to the company, no financial data was exposed.

The telco company reported the incident to the Data Protection Commissioner and to gardaí, the good news for the customers is that the stolen information has been used by a third party in a targeted attack.

“Eir treats privacy and protection of all data extremely seriously and our policy is that all company laptops should be encrypted as well as a password protected,” it said.

“In this case the laptop had been decrypted by a faulty security update the previous working day, which had affected a subset of our laptops and was subsequently resolved.”

Eir is notifying the incident to the affected customers.