[News](/news)

Cyber attack reported for Health Research Board

[Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news)

# Cyber attack reported for Health Research Board

##### [UpGuard Team](/team/upguard)

February 26, 2026

### Key Facts: Health Research Board Data Breach

* **Date reported:** February 25, 2026.
* **Unauthorized access identified:** February 25, 2026.
* **Target entity:** Health Research Board (hrb.ie).
* **Source of breach:** Unknown (unidentified cyberattack).
* **Data types:** Specific data categories not disclosed; potential risk to internal administrative information, research data, or employee records.
* **Status:** Confirmed; employees were instructed via text message to stay home, avoid using work laptops, and ignore phone notifications during containment.
* **Severity:** Medium; while the full extent of data exposure is under investigation, the incident necessitated a complete halt of physical and digital operations for staff.

[Start continuous breach monitoring with UpGuard.](https://www.upguard.com/product/breach-risk/threat-monitoring)

## What happened in the Health Research Board data breach?

Health Research Board (hrb.ie) was the target of a cyberattack reported on February 25, 2026. No specific threat actor has been identified in the initial disclosure of the incident. The security event was significant enough to prompt the organization to send text messages to its employees, advising them to stay at home and avoid using their work laptops.

The organization's IT team worked to isolate and contain the security issues as they arose. Employees were also specifically instructed to disregard any notifications appearing on their work phones during the containment process. This incident is classified as medium severity. Such events typically carry risks of service disruption, unauthorized access to internal systems, or potential data exposure if the perimeter is fully breached.

## Who is behind the incident?

The attacker or cause of the incident has not been identified.

## Impact and risks for Health Research Board customers

For those associated with the Health Research Board, potential risks include service disruptions and the possibility of credential abuse or phishing attempts if internal systems were compromised. While the full extent of the impact on personal data is currently unclear, incidents of this nature can lead to unauthorized access to sensitive administrative or research information.

Typical outcomes of such attacks include operational downtime and the requirement for extensive forensic investigations to determine the breach's scope. Affected individuals should monitor their accounts for suspicious activity and update login credentials as a precaution. Maintaining transparency during the recovery phase helps mitigate long-term security risks to the organization and its stakeholders.

## How to protect against similar security incidents

Scan your domain for vulnerabilities in minutes.

## Frequently asked questions

### What happened in the Health Research Board security breach?

On February 25, 2026, Health Research Board (hrb.ie) disclosed a security breach. According to initial reports, the organization was targeted by a cyberattack, prompting employees to receive text messages advising them to avoid using their laptops and to stay at home.

### When did the Health Research Board breach occur?

The Health Research Board breach was publicly reported on February 25, 2026. The exact date of the attack has not been disclosed.

### What data was exposed?

The types of data involved in the Health Research Board incident have not been disclosed.

### Is my personal information at risk?

If you interacted with Health Research Board, there's a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or financial records. Stay alert for updates and take precautionary measures to secure your accounts.

### How can I protect myself after this data breach?

* Change passwords for all associated accounts
* Enable [multi-factor authentication (MFA) ](https://www.upguard.com/blog/mfa-multi-factor-authentication)where possible
* Monitor financial statements for any unusual activity
* Be cautious of unsolicited communications or phishing attempts
* Use data breach monitoring tools to track your information
* If you receive a text message with a link or a request for a password, delete it immediately

### What steps should companies take after being impacted by this breach?

Health Research Board is expected to secure its systems, notify affected parties, and provide guidance on protective actions. Organizations in this situation typically review security measures and deploy [attack surface management](https://www.upguard.com/product/breach-risk/threat-monitoring) to prevent future incidents.

## How secure is HRB?

HRB (hrb.ie) is the Health Research Board, the lead State agency in Ireland responsible for supporting and funding health research, information, and evidence.

* View our free preliminary report on HRB’s security posture
* 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities

[View HRB's score](/security-report/hrb)

[View score](/security-report/hrb)

[https://www.hrb.ie/](/security-report/hrb)

### Sign up for our newsletter

UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.

## Latest news

Stay up-to-date with the latest news in cybersecurity.

[](/news/hugging-face-data-breach-2026-07-20)

#### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20)

A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [UpGuard Team](/team/upguard)

July 20, 2026

[](/news/ey-data-breach-2026-07-19)

#### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19)

A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [UpGuard Team](/team/upguard)

July 15, 2026

[](/news/south-florida-injury-convenient-care-data-breach-2026-07-16)

#### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16)

A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures.

##### [UpGuard Team](/team/upguard)

July 15, 2026

[](/news/park-west-psychology-data-breach-2026-07-16)

#### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16)

A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [UpGuard Team](/team/upguard)

July 15, 2026

[](/news/fall-river-municipal-credit-union-data-breach-2026-07-16)

#### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16)

A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [](#)

July 14, 2026

[](/news/npcil-data-breach-2026-07-16)

#### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16)

A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [UpGuard Team](/team/upguard)

July 14, 2026

[View all news](/news)

## Protect your organization

Get in touch or book a free demo.

[Contact sales](/demo)

[Free demo](/demo)

##### Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](/instant-security-score)
