Eircom

eircom Group Statement on Laptop Theft

eircom has reported a potential data breach for up to 6,845 eMobile and Meteor customers along with 686 employees to the Data Protection Commissioner. The breach is a result of the theft of three laptops, two laptops from eircom’s offices at Parkwest, Dublin and a third laptop stolen from the home of an employee.

The incidents were immediately reported to the Gardai and two separate investigations are ongoing. There is no evidence at this time that the data at risk has been used by a third party.

eircom treats privacy and protection of all data extremely seriously and we have taken the following pro-active measures to address the situation.

More than 20 customer care agents and account managers have initiated a contact programme to telephone all 550 customers whose financial data may be at risk. The agents will notify the customers of the risk and inform them of the specific data involved. They will also answer any questions or concerns they may have. In addition, all impacted customers will be notified by letter.

As a precautionary step, we have contacted the Irish Banking Federation, who has notified their members of the potential risk to data for affected eMobile and Meteor customers.

Meteor customers who believe they may have been affected can contact us at 1800 444 085 or log on at www.meteor.ie.

eMobile business customers can contact us directly on 1800 428278 or can visit www.emobile.ie.

Impacted staff have also been notified of the incident.

A review of the Group’s encryption policy is underway to ensure all computers and laptops are compliant with the Group’s encryption policy. 

Theft from eircom offices at Parkwest

During the internal investigation it emerged that the two laptops contained personal data for some current and former eMobile and Meteor customers.

Specifically, there is a potential data risk for 6,441 current and previous eMobile business customers, dating from August 2010 until December 2011. The data at risk for the vast majority of customers is personal data including names, addresses and telephone numbers. There is a small group of approximately 146 customers where financial data including bank account details may be at risk. 

Separately, there is also a risk to data held within 404 Meteor customers. The data specifically concerns post-pay customers who applied online between January and July 2011. 

The personal data at risk includes details such as an applicant’s name, address, and telephone numbers as well as a range of documentation used to support a customer application such as passport and drivers licence details, various photo ids or utility bills which all may have been used to establish proof of identity.  In some cases financial data such as bank account, laser or credit card details is also at risk

Laptop theft from employee’s home

In a separate incident, a laptop was stolen from an employee’s home The incident has been reported to Gardai, however the laptop has yet to be recovered. An internal investigation has verified that the names and addresses of 686 Meteor employees at risk.