Information made public following a massive police data breach appeared on the phone of a man facing terrorism charges within minutes, a court has heard.
Two men appeared in court on charges following searches in the Belfast, Enniskillen and Aughnacloy areas this week relating to alleged New IRA activities.
Brian Francis Cavlan (49) from Coronation Park, Aughnacloy and Rory Martin Logan (43) from Ross Close, Enniskillen but currently remanded in custody are jointly charged with collecting information likely to be of use to terrorism.
Details of almost 10,000 officers were mistakenly published online in response to a Freedom of Information request in August 2023.
The list included the surname and first initial of every employee, and also their rank or grade, where they are based and the unit in which they work.
Although it was removed from the internet, the PSNI previously said they believed the information had been accessed by dissident republicans.
It is alleged on April 12 2024, Cavlan possessed two spreadsheets containing details of serving police officers and staff.
There were also allegedly two screenshots of portions of a spreadsheet containing details of PSNI officers and police staff.
Logan is charged with having a spreadsheet of serving officers and staff on June 11 2024.
The pair appeared together in the dock of Strabane Magistrates Court but refused to acknowledge the proceedings.
A detective explained both men were arrested on February 11 as part of an ongoing investigation into the New IRA.
This followed the recovery of a radio-controlled improvised device close to a hotel on June 8 2024 in Co Louth and the possession of the PSNI data breach spreadsheet.
Cavlan’s phone was seized from his hand in April 2024 “attributing it to him” and he refused to provide his passcode.
It was accessed by Cybercrime which recovered the spreadsheet, as well as accounts for Instagram and WhatsApp accounts in Cavlan’s name.
The spreadsheet was in six locations on the phone, with two screenshots highlighting specific officers and had been held for around six months.
The data breach occurred on 16.48 on August 12 2023 and it appeared on Cavlan’s phone just minutes later, and a further three times the following day.
“This showed knowledge and control as well as positive actions taken,” said the detective.
Investigation continued and an expert provided a report last month.
Cavlan was arrested but “didn’t engage in any way during interview” including refusing to provide his name,
Logan’s phone was seized directly from him on June 11 2024 and he likewise refused to provide passcodes.
The spreadsheet was found to have been saved on September 7 2023 – the month after the breach – having been received by WhatsApp.
The message has been deleted but the spreadsheet had been forwarded to Logan’s wife’s phone.
Logan also refused to engage during interview.
Defence solicitor Gavin Booth, of Phoenix Law, contended the data breach spreadsheet was seen by many and, “police cannot show anything was done with it. There’s no evidence this was for any sinister purposes”.
However the detective rejected this setting out, “we believe this was sinister and unfortunately neither accused offered any explanation”.
Logan did not seek bail however an application was made for Cavlan which was opposed.
Refusing, District Judge Oonagh Mullan said: “This is a deeply concerning matter given the data disclosed and retained. There is no doubt there is involvement in dissident republican activity. The risks are real and evident.”
Both men will appear again by video-link at Omagh Magistrates Court February 25.