Patras Municipality Says Intruder Used User Credentials to Steal Electronic Documents
Summary
The Municipality of Patras says an intruder used user credentials to access its system and download a limited number of documents, including employee information and data on five citizens. It disabled affected accounts and enabled 2FA.
Key points
- The municipality said an unknown person accessed an information system using user credentials and downloaded a limited number of electronic documents.
- Accessed files reportedly included official correspondence, employee and staff information, and data belonging to five citizens who had submitted requests.
- The municipality said the incident did not involve all its information systems or files and found no generalized access to residents’ data.
- The municipality warned affected employees and citizens to watch for possible phishing, impersonation, or fraud using the acquired information.
- It disabled affected accounts, invalidated active sessions, enabled 2FA for users of the system, and carried out further technical checks.
Article Details
- Victim Organization
- Municipality of Patras
- Incident Type
- Unauthorized access using user credentials and download of electronic documents
- Data Types Exposed
- Official correspondence
- Personal details of employees and department officials
- Data relating to five citizens who had submitted requests to the municipality
- Affected Records
- A limited number of electronic documents; exact count not disclosed. The documents included data relating to five citizens.
- Operational Impact
- Affected accounts were disabled, active sessions were revoked, and two-factor authentication was enabled for users of the affected system. No broader system impact was reported.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed