
Was someone looking for a pot of gold?
The Football Association of Ireland (FAI) has confirmed it suffered a security breach of its payroll systems, which was discovered last month, saying no staff data had been compromised. It was previously feared that hackers could have stolen bank details for leading FAI employees and officials, like Ireland manager Mick …
"the FAI got in touch with the Irish Office of the Data Protection Commission as soon as the breach was discovered"
That's the right way to do it. Of course, it happened in Ireland, which is not Irexiting from the EU, and the GDPR is starting to look like a very effective cluebat, but still, somebody had the balls to stand up and get counted, so congrats to him.
The fact that the breach did not result in anything getting out is a relief for everyone involved and makes the diligence of the FAI all that more commendable. I'm sure the ODP will not treat them harshly.
"somebody had the balls to stand up and get counted, so congrats to him.""
That's one of the prime tenets of the GDPR. Early and honest reporting goes a long way to minimising any potential fines. Not reporting a breach which is later revealed can significantly increase any potential fine.
Anything to do with footballers and their transient importance has the same momentous consequence as the online lists of Annual Darts-Winners from 1973 - 2003 at the Hare & Hounds, Wogglethorpe, near Iresby-on-Plonk, Westmoreland [ closed 2008 nearly a year after the Smoking Ban ] being nicked by villains.
"there is no evidence of any of their data being extracted from the server."
is not the same as
"No data was extracted from the server"
The former could simply be the the result of terrible logging and monitoring, even if plenty of data was extracted.
Then again, if no card details have been used fraudulently, that's a good sign.