Fake travel tests: major data breach at a coronavirus testing company

A significant knowledge breach at Testcoronanu, a coronavirus testing firm, made it doable to get pretend journey certificates and admission tickets within the CoronaCheck app — with out even taking a take a look at.

However by including simply two traces of code of their internet browsers, individuals may fill of their particulars, enter what sort of take a look at they wished, after they took it, and what the outcome was, studies RTL Nieuws. It was additionally doable to govern the take a look at outcomes or testing dates of others — for instance, by marking a unfavourable take a look at as optimistic.

Specialists say these type of pretend take a look at outcomes should not solely a hazard to public well being — however can even have a detrimental affect on the general public’s confidence within the CoronaCheck app.

Knowledge of 60,000 individuals leaked

As if that wasn’t sufficient, the leak gave entry to the non-public knowledge of over 60,000 people. This included not solely names and electronic mail addresses but in addition telephone numbers, residential addresses, BSNs, passport numbers, and medical data, resembling whether or not a person has examined optimistic prior to now. 

“Testcoronanu.nl manages your private knowledge with the best care,” reads the corporate web site, a laughable message within the wake of the scandal.

“This knowledge breach may be very surprising,” tells Frederik Zuiderveen Borgesius, professor of ICT & Regulation at Radboud College, tells RTL Nieuws. 

“It doesn’t get rather more delicate than this. That is precisely what medical privateness is for: that folks dare to get examined as a result of they belief that their knowledge is protected,” he provides.

Official testing associate

Testcoronanu was not solely beneficial by the federal government as one of many affiliated journey take a look at suppliers, but in addition acquired subsidies to function.

The corporate has 10 testing places within the Netherlands and three in Belgium, all of which have been closed since Sunday. 

The Ministry of Well being, Welfare and Sport is now investigating how the corporate was accepted as an official testing associate.

Very critical breach

The Dutch Knowledge Safety Authority classifies this breach as very critical. Testcoronanu could solely begin testing and processing knowledge once more if “safety and reliability are assured.”

The Ministry of Well being, Welfare and Sport says that there aren’t any indications that anybody else besides the RTL Nieuws journalists had entry to the database.

How do you are feeling about this knowledge breach? Inform us within the feedback under!

Function Picture: Gaudilab/Depositphotos

The submit Faux journey assessments: main knowledge breach at a coronavirus testing firm appeared first on DutchReview.