Dutch Dept. of Public Works leaks subscribers’ data

Karin Spaink summarizes, in English, a breach reported on Webwereld on January 27:

The Dpt of Public Works (Rijkswaterstaat) installed a new profile system on their web site that subscribers to their newsletter had to use. When logging in to the system, subscribers were presented with the personal data of the previous visitor. The leaked data included first name, last name, e-mail address. Whether one could also change the presented data is unclear. The Dpt. took the system down and fixed the problem.

About the author: Dissent

Comments are closed.