Ireland’s Employment Permits Portal Offline After Unauthorised Activity: Investigation Ongoing and Alternative Submission Arrangements Awaited
Updated: 23 hours ago
DUBLIN, 7 November 2026 – Ireland’s Employment Permits Portal has remained offline since late October after the Department of Enterprise, Tourism and Employment (DETE) identified suspicious unauthorised activity on elements of the system, with no confirmed date yet for its restoration and new applications still unable to be lodged through the normal channel. The portal, which was expected to reopen on 3 November 2026, did not do so, and the Department has confirmed that it “will only reopen when the Department is satisfied that all necessary security, testing and assurance measures have been successfully completed”. The incident was first notified on 29 October 2026, when DETE published a notice confirming that a security vulnerability had been identified and that the portal had been taken offline as a precautionary measure to protect users and systems. The Department’s official Employment Permits Portal Service page carries the latest service updates, and the portal login remains unavailable at employmentpermits.enterprise.gov.ie/portal-login.
What Happened and What Information May Have Been Affected
According to DETE’s official notice, the preliminary investigation identified a security vulnerability following the detection of suspicious activity. The portal was taken offline on a precautionary basis, and the Department engaged independent cybersecurity specialists to support the forensic investigation, restricted access to the administration environment, removed access from suspected compromised administrator accounts, implemented additional firewall restrictions, and commenced a formal incident response process including engagement with its Data Protection Officer and an initial notification to the Data Protection Commission.
The information potentially exposed is limited to basic user account information: names, email addresses, and user account roles such as employer, agent, or employee. DETE states that, from its preliminary investigations, broader and more sensitive personal data categories have not been affected, though it continues to investigate the scope of the incident with its technology partners and independent specialists. The Department’s FAQ adds that it is not yet possible to determine definitively what information may have been accessed, and that the investigation remains ongoing.
Permit Processing Continues, but New Submissions Are Blocked
A critical distinction for employers and applicants is that existing applications are still being processed. DETE has confirmed that the Employment Permits team “continues to process applications internally” and that the portal outage “has not prevented applications from being assessed or decisions from being made”. Applicants will continue to receive updates and decisions in the usual way. Applications submitted before the portal went offline remain in the processing queue and are unaffected in terms of assessment.
However, new applications cannot currently be submitted. The Department has confirmed that new employment permit applications cannot be submitted by email at present, and that the online system remains the established channel. DETE is “actively progressing alternative arrangements” for the submission of new applications, supporting documentation, reviews, and other requests that would normally go through the portal, but no details or launch date for those arrangements have yet been published. The Department’s FAQ states that “further information will be published as soon as these arrangements are finalised”.
Applications saved in draft, applications awaiting fee payment, and other information held on the system are expected to remain available when the portal returns. The Department has also confirmed that applicants should not create a new application solely because the portal is unavailable, and that draft applications affected by the outage will remain accessible upon restoration.
Flexibility on Deadlines, Renewals, and the 28-Day Rule
DETE has committed to applying “appropriate flexibility” so that applicants are not disadvantaged by the outage. The official FAQ addresses several specific scenarios:
The 28-day submission period. Draft applications are normally required to be completed and submitted within 28 days. The Department has confirmed that applicants will not be disadvantaged if the outage prevents them from submitting within that period, and that they do not need to create a new application solely because the 28-day window has elapsed during the outage.
Renewal applications. Permit holders due to renew while the portal remains unavailable will not be disadvantaged where the outage prevents submission within the normal timeframe. However, the Department has clarified that the outage does not automatically extend an employment permit or immigration permission; holders should continue to comply with the conditions attached to their current permission.
Labour Market Needs Test (LMNT) advertising. Employers required to complete LMNT advertising or submit evidence of compliance will receive flexibility where the outage has affected their ability to meet those requirements within the normal timeframe. Employers should retain copies of all advertising records, including publication dates and advertising periods, as these may be required when the portal is restored or alternative arrangements are put in place.
Reviews and appeals. Flexibility will also be applied where the outage affects the submission of review or appeal requests, with further guidance promised on submission arrangements.
Security Advice for Portal Users
DETE has issued specific guidance for users who may be concerned about the incident. Users should be alert to suspicious communications — including unexpected emails, text messages, or telephone calls — that refer to employment permits, portal accounts, applications, or payments. The Department advises users not to click on suspicious links or open unexpected attachments, never to disclose passwords or other personal data in response to unsolicited requests, and to exercise caution with requests for personal, business, or financial information, including requests for identity documents. DETE has stated that it will never ask users to disclose personal data by email or text message. Users should be particularly alert to communications that appear to come from the Department or refer to this incident.
Read Also
Contact Points and What Employers and Applicants Should Do Now
For questions relating to the security incident, DETE has directed users to dataqueries.permits@enterprise.gov.ie. For urgent employment permit application queries, the contact address is epos@enterprise.gov.ie, and for data protection queries, the Department’s Data Protection Officer can be reached at dataprotection@enterprise.gov.ie.
Employers and applicants should take the following practical steps while the portal remains offline:
Do not create a new application to replace a draft or submitted application; existing drafts and submitted applications will remain available or in processing.
Retain all supporting documentation, including LMNT advertising records, renewal documentation, and evidence of compliance, in case it is required when alternative arrangements are announced.
Monitor the official Employment Permits Portal Service page for updates on restoration and alternative submission arrangements, as this is where DETE has said details will be published first.
Remain vigilant for phishing attempts and verify any unexpected communication through official contact channels.
Plan for potential delays in new applications and renewals, and factor the outage into hiring timelines and permit-expiry planning.
The Department has acknowledged the “significant disruption this has caused for employers, employees and employment permit agents” and has apologised for the inconvenience. Until the portal is restored or alternative arrangements are published, the practical position is that processing continues for existing applications, but new applications cannot be validly lodged through the normal channel.
For more news and daily updates on Irish visas and employment permits, visit visasupdate.com/blog/category/ireland
Comments