A report has detailed how Passwork, a password management product promoted as being based in the European Union, found its way into Irish State agencies despite reported ties to a Russian company. The case raises new questions about software vetting, supply chains and cybersecurity oversight in the public sector.
According to the account, the trail began with unsolicited outreach to Dmitri Grigoriev, head of IT at the Dublin Institute for Advanced Studies, a State-funded research body in Dublin. The approach appears to have been part of the route by which the software reached Irish public institutions.
What makes the story significant is the contrast between Passwork’s public positioning and its alleged corporate links. While the product is said to present itself as EU-based, it reportedly has extensive connections to a Russian company that is licensed by Russia’s security service.
The findings are likely to intensify scrutiny of how Irish agencies assess security tools that handle highly sensitive credentials. Password managers sit at the center of access control, so any uncertainty around ownership, licensing or jurisdiction can quickly become a wider national cybersecurity concern.
