Eamon Gilmore (Dún Laoghaire, Labour) | Oireachtas source

We are all aware, as Deputy Martin said, that a data breach has occurred at a company called Loyaltybuild, a company that processes transactions in respect of loyalty schemes on behalf of other companies. Given the seriousness of the breach, the Office of the Data Protection Commissioner sent in an inspection team to investigate the breach. The commissioner has received a preliminary report on the findings of the inspection team. The inspection team confirmed the extent of the breach in which the full card details of more than 376,000 customers were taken, of which in the region of 80,000 were Irish customers. Over 70,000 were SuperValu Getaway customers and over 8,000 were Axa Leisure Breaks customers. The details of an additional 150,000 clients were potentially compromised. The inspection team also confirmed that the names, addresses, telephone numbers and e-mail addresses of 1.12 million clients were also taken. It is not yet known how many of the 150,000 clients or the 1.12 million clients are Irish customers. The initial indications are that these breaches were an external criminal act.

The Office of the Data Protection Commissioner will assess fully the findings of the inspection and has already made a number of recommendations to Loyaltybuild. A follow-up inspection will also be carried out. An Garda Síochána is also investigating the matter. The important message at this stage is that the customers affected be vigilant in respect of their accounts, particularly regarding any transaction since the end of October of this year, and to report any suspicious transaction to their card companies. Clients should also be vigilant in respect of suspicious communications of any kind that they receive. Once we have the report from the Office of the Data Protection Commissioner and the Minister for Justice and Equality is reported to by the Garda Commissioner, we will take whatever steps are necessary.

See this speech in context