According to the union, up to 26,000 documents were allegedly obtained over six months, including ID numbers linked to email addresses, staff lists, command phone numbers, and vehicle license plates. This information could compromise staff safety, facilitating threats or surveillance.
Data obtained by the union from the General Directorate and other competent bodies indicates that inmates accessed a dozen departmental network folders, copying 40 GB. Although the first access was detected in February, most activity occurred in July, with the breach being identified on August 9th.
Act of extreme gravity
SICAP-FEPOL criticizes Justice for downplaying the incident, deeming it an "act of extreme gravity" that compromises personal data and employee security. The union disputes Justice's initial account of "limited and occasional access," asserting that the obtained data reveals a much broader breach.
The organization details that an alteration in call logs was detected in February, the departmental network was breached in May, and most document views occurred in July. They demand accountability for failing to implement early detection mechanisms for a situation that persisted for months.
While there is no definitive proof that the information has left the facility, the union warns that its extraction and potential circulation cannot be ruled out. The investigation has seized six computers, two MP3 players, and one USB device.
Consequently, SICAP-FEPOL requests that all affected employees be notified of the compromised data without waiting for the investigation to conclude, and calls for a comprehensive infrastructure audit and specific measures for the affected personnel.
