Cyberattack on Portugal's national firefighters' register exposes personal data
Portugal's civil protection authority confirmed unauthorised access to a database that holds about 60,000 records, Portugal Resident reported.
Portugal's National Emergency and Civil Protection Authority (ANEPC) has confirmed a cyberattack on the country's national firefighters' database, according to Portugal Resident. The attack may have exposed sensitive personal information belonging to thousands of firefighters.
In a statement issued on Saturday, October 24, ANEPC confirmed that someone had gained unauthorised access to data held in the National Register of Portuguese Firefighters (RNBP), the outlet reported. The authority said it had temporarily suspended the affected application while it put additional security measures in place.
Portugal Resident, citing information obtained by Lusa news agency, reported that the hackers could reach a wide range of personal details. These include full names, citizen card numbers, tax identification numbers, social security numbers, healthcare identification numbers, driving licence details, dates of birth, marital status, addresses, telephone numbers, photographs and blood groups.
António Nunes, president of the Portuguese Firefighters' League (LBP), said the database holds about 60,000 records, according to the report. He confirmed the incident but stressed that no banking information was stored in the system.
The register covers firefighters across Portugal, including command personnel, active firefighters, reservists and honorary members.
Why it matters
After the attack, ANEPC sent an internal warning to regional command centres and fire services nationwide, urging firefighters to stay alert to possible fraud, Portugal Resident reported. The authority warned that the stolen information could be used in phishing attacks, fraudulent text messages, telephone scams or malicious QR codes that send victims to fake websites.
Firefighters have been told to take particular care with unexpected calls, messages or emails that ask for personal information, ask them to click on links or direct them to fill in online forms. Anyone who receives a suspicious message should check whether it is genuine through the command structure of their own fire service.
ANEPC said official communications, especially those about updating personal data, normally come through institutional channels. The authority said it would keep strengthening its information systems and taking steps to protect personal data.
The Portuguese Firefighters' League acknowledged the breach and said individual notifications should have been sent to everyone registered in the database, the outlet reported.
What is not known
According to Portugal Resident, ANEPC has not said when the attack happened, how long the hackers may have had access to the database, or whether the stolen information has since been misused. The report does not say who was behind the attack.
This story rests on a single report from Portugal Resident, which itself drew in part on Lusa news agency.
