A cyberattack at CEPOL affected 99,000 individuals

Omissions

• The official CEPOL source reports 'over 97,000' notifications rather than exactly 99,000. The difference of approximately 2,000 may represent rounding by the MEP or subsequent updates to the data. The data breach occurred in 2024 and notifications were sent between October and December 2024.
• The claim does not specify the time period of the cyberattack, which occurred in 2024.

Sources

• PrimaryCEPOL - Update on the notification of the data breach #3Starting in October 2024, until 31 December 2024, over 97 000 notifications were sent to people whose personal data were processed in the 31 processing activities identified as being affected by the data breach
• PrimaryCEPOL - Notification of a data breach related to LEEd platformCEPOL experienced a cyberattack affecting the LEEd platform; investigations established that the platform was breached