← GGD (Municipal Health Services)

2021 GGD — 1,250 COVID track-and-trace data stolen

2021 1.3K records affected Share on X

Data compromised

Names, addresses, phones, emails, BSN, test results

Technical writeup

CoronIT (test data) and HPZone (contact tracing) breached. Names, addresses, phones, emails, BSN, test results. Two GGD call-center employees arrested for stealing and selling data on Telegram/Snapchat/Wickr; €30–50 per lookup. 26K employees had CoronIT access; 8K had HPZone.

Root cause

Insider; weak access controls

References