Public Procurement Service security incident history
Hacking, data breaches and other security incidents involving Public Procurement Service, with related coverage.
Procurement agency exposes facial photos of 189 evaluators to external AI
189Impact: Facial photographs used to verify the identities of 189 online evaluators
A Public Procurement Service employee sent facial photographs used to verify the identities of 189 online evaluators to ChatGPT, an external generative AI service, while developing and testing a work-related AI system from July to October 2026. The agency confirmed the exposure on 6 November, reported it to the Personal Information Protection Commission (PIPC), and proceeded with individual notifications to those affected and a request to the service operator to delete the photographs. No exposure of personal data other than the photographs or secondary harm was confirmed.
Related reports: 15 · last report →