IE: Data breach on driver licence website investigated
Over on Twitter, Brian Honan just noted that two infosec stories led the evening news in Ireland tonight. One of them surely must be the Loyaltybuild/Supervalu breach, reported previously on this blog. I suspect this is the other one:
The Road Safety Authority has confirmed that a data breach has occurred on the website for the new National Driver Licence Service.
The breach occurred on the Contact Us section of the website, which failed to refresh and retained queries, allowing other users to see that information.
The RSA says 721 people have been affected but that they do not believe there was any financial information submitted through the website.
It says it is currently reviewing each case and contacting the individuals involved to advise them of the breach.
Read more on RTÉ.