Bonum Certa Men Certa

EPO Had a Leakage Problem and Privacy of Stakeholders Was Compromised, Affecting at Least 100 Cases

Revelations from insiders

A coverup



Summary: The confidentiality principle was compromised at the EPO and stakeholders weren't told about it (there was a coverup)

A recent software issue concerning the EPO’s on-line filing services has affected at least 100 cases. On the EPO website it was described as “unexpected behaviour of the Online Filing software”. Internally it was called a “leakage”. While the incident may have affected the privacy of patent attorneys, law firms and applicants, the EPO users were not informed about these risks. Users were simply advised to install a software update as soon as possible.



The public announcements:

On 26 April 2019 users of the EPO’s on-line services were informed about a software issue:

Problems with Online Filing



We are experiencing unexpected behaviour of the Online Filing software. In order to avoid any impact on user operations and data, users are asked to check carefully the acknowledgment of receipt and inform the EPO Customer Services immediately in case of any irregularities. A software patch fixing the issue (epptch5464) has been prepared and is available for download.

We apologise for any inconvenience.



A new on-line filing software was made available later on the same day, together with the following message:

Online Filing software – new update now available



26 April 2019 update

The EPO is pleased to inform users of its Online Filing software that a replacement EP update 5.0.11.174 for Version 5.11 (build 5.0.11.173 or lower) is now available for download. This update replaces, but does not require deinstallation, of the previous updates issued on 1 April 2019 and 15 April 2019 and also resolves issues announced on 26 April 2019.

Users are advised to install this update as soon as possible.

Users who have activated the Live Update function will be notified automatically.

We apologise for any inconvenience.


The internal communication:

The following message was sent to a number of EPO managers and staff at the end of April 2019:

Support: The update of on-line filing (OLF) released on 01.04.2019 caused documents that were not attached by the user to the submissions to be nonetheless included with the submission and loaded into the TOC as INCANNEX. The package has since been withdrawn (Online Services) but it cannot be excluded that users having installed it have continued using it thereafter. D132 [Patent Procedures Management] has informed FOs [Formalities Officers] about the issue, and coordinated with OCFDs [Opposition and Central Formalities Directorates] for dealing with the 100 cases already affected by the leakage; the cases have been pointred [sic!] out by a query run by BIT [Business Information Technologies]. The internal process to deal with this emergency has worked smoothly thanks to the collaborations of all stakeholders (OCFDs, BIT and D132).


The principal issue is that confidential documents which are submitted to the EPO (via on-line filing) by accident are not recognised as confidential matter. There is no check in place for this purpose. It happened that private documents were published on the EPO website by accident. It is not known whether any of the applicants, law firms or patent attorneys was harmed by these incidents. Other incidents may not yet have been discovered. While the bug was discovered in the second half of April 2019, it is not known at what date and with which software version it was introduced.

Recent Techrights' Posts

Flying in 2025
worse than ever before
The UEFI 9/11 - Part III - Chaos is Scheduled to Happen Second Thursday of September (No Matter What the Microsofters Tell You)
The clock is ticking
Downplaying the Impact of "UEFI 9/11" is a Losing Strategy
we won't publish much whilst on holiday
Representing and Speaking for Animals
If I ever choose to take this matter to tribunal with animals-centric NGOs on my side, it'll get some press coverage for sure
 
Birds Are Not "Pests and Vermin", Privacy is Not a Crime, and GNU/Linux is Not 'Hacking Platform'
I could not help but think of Free software analogies
The Sites Should Be Very Fast Again
That issue is now resolved
Activists, Including Technical Activists, Need Not Pursue Affirmation
Techrights doesn't play or participate in a "popularity contest"
Government Sites Should Run Free Software
Not proprietary bloatware with buzzwords
LLM Slopfarms Take No Breaks
When people run sites by bots they don't need to worry about "breaks"
GNOME Having a Meltdown Again
Thanks and farewell to Steven Deobald
Gemini Links 30/08/2025: Low Tech and Hunchbin 1.0.6
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, August 29, 2025
IRC logs for Friday, August 29, 2025
Financiers and Sponsors of the Slop Hype (Pyramid Scheme Waiting to End, Bubble That Will Inevitably Implode)
It's also burning the planet
Slopwatch: Fake Articles About "Linux", Google Helps Ponzi Schemes and Slopfarms in Google News
Slopfarms are a real pain
Gemini Links 29/08/2025: Retiring at 62 and URL Filtering HTTP(S) Proxy on Qubes OS
Links for the day
Links 29/08/2025: Lisa Cook Sues Convicted Felon and Backdoor Mandate in UK Resisted
Links for the day
Links 29/08/2025: Arti 1.5.0, War on Public Health (CDC), and Slop 'Bros' Made to Pay for Their Mass Plagiarism
Links for the day
No, 4Chan is Not Fighting for You by Lawyering Up Against Ofcom (UK)
Don't mistake proto-fascists for people who "fight for you". They don't.
In Many Places in the World Vista 11 "Market Share" is Going Down, Not Up
In some countries Windows is already down to third place or lower
More Microsoft-Connected Layoffs, at Least Third Time This Month! (Also Another Death on Campus)
Microsoft as a "gaming" company is where studios, projects, games, and even developers come to die
Slopwatch: Fake Articles About "Linux", Slop Images in VentureBeat, Linux Foundation Spam Made With LLM Slop and Slop Images
The only relief or upside - if any exists - is that the pace of slop was down a bit this week
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, August 28, 2025
IRC logs for Thursday, August 28, 2025
Gemini Links 29/08/2025: Poems, Games, and Java 25 Performance
Links for the day
Links 28/08/2025: Greenland 'Interferences' by US and Skinnerboxes to Get Banned in Korean Schools
Links for the day
Richard Stallman (RMS) Talk in Ethereum Cypherpunk Congress Will be Remote
This past week RMS received lots of accolades online
The Register MS (Run by Microsoft Operatives): Free Software is Putin, Hence Evil and Dangerous
The current editor in chief is an American Microsofter, the previous one went to work for Google (US)
Links 28/08/2025: Chatbots Distorting/Fabricating History and Also Driving Suicide
Links for the day
Gemini Links 28/08/2025: Back in Japan and Why "Hacker News" Sucks
Links for the day
A Much-Needed Wake-up Call to Users of Wordpress.com, Blogspot, Substack and All Those Other Outsourced (and Centralised) Platforms
There are several lessons in there
The UEFI 9/11 - Part II - Campaign of Censorship and Defamation Against Critics
In dictatorships, humour serves an important role. It's tragic.
Open Source Initiative (OSI) Resists Software Freedom, Even by Attacking Its Own
The OSI is compromised
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, August 27, 2025
IRC logs for Wednesday, August 27, 2025
Slopwatch: linuxsecurity.com, Slopfarms in Google News, and More
Some readers of ours end up sending us links that are from slopfarms, not realising those are slopfarms