RESA, the largest operator of student housing and university residences in Spain, has confirmed a significant data breach. The breach occurred when an unauthorized third party accessed part of their system, compromising sensitive client data. The information exposed includes identifying details such as names, nationalities, emails, phone numbers, postal addresses, and identification numbers, including DNI and passport numbers. In addition to personal details, banking information like account numbers and IBANs were also affected in the breach.
The unauthorized access, which occurred in March, was detected through RESA’s internal security systems. Although the exposed data cannot directly facilitate financial transactions, individuals may face fraudulent activities, such as phishing attempts or other malicious uses of their personal information. The company acted quickly to address the issue, blocking the unauthorized access and bolstering security measures to prevent future breaches. RESA also promptly informed the Mossos d’Esquadra, Spain’s police force, and the Spanish Data Protection Agency about the incident.
RESA reassured its clients that it takes data security seriously and has a comprehensive protocol to handle incidents like this. To minimize the risks, they recommended that affected individuals change their passwords, be vigilant for suspicious communications, and avoid downloading files or clicking links from untrusted sources. They also stressed that RESA will never request sensitive information like banking details, usernames, or passwords through email, SMS, or external links.
RESA expressed deep regret for the inconvenience caused by the breach and reiterated its commitment to safeguarding clients’ personal data. They assured clients that they would continue to monitor the situation closely and take every measure necessary to protect the privacy and security of their data. Clients were encouraged to contact the Data Protection Officer for additional support and information regarding the breach.
Reference: