Breaches and incidents
SIRP, Portuguese intelligence system (Portugal): contractor’s test server breach exposes unclassified data
SIRP said data offered on a cybercrime forum was obtained through a cyberattack on the development (test) server of a provider hired in 2025 to design the...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- SIRP said data offered on a cybercrime forum was obtained through a cyberattack on the development (test) server of a provider hired in 2025 to design the public websites of SIRP, SIS and SIED, and may include “some elements of a limited set of submitted applications”; the hackers claim 120GB in 312,144 files (per RTP and DNoticias, citing Pplware).
- Root cause per SIRP: compromise of the contractor’s development server; SIRP said “there was no intrusion” into SIRP infrastructure or the SIS and SIED data centres and no evidence classified or operational information was compromised.
- No attacker named.
- The provider reported the incident to SIRP, which took mitigation measures, reported the facts to the Attorney General’s Office (PGR) and said it will keep assessing; the two outlets carry the same wire-style statement, so tagged [C].