The RIVM infection radar, where the Dutch can indicate whether they suffer from corona complaints, contained a serious data breach. This is evident on Saturday from research by the NOS in collaboration with security researcher Tom Wolters. RIVM has taken the database off the air.
According to the NOS, "anyone with any technical skills until this morning could see what other participants answered to personal and medical questions."
Participants in the Infection Radar fill in a form every week, indicating which complaints they have. This allows RIVM to monitor how health complaints are spread in the Netherlands and how this develops over time.
However, the form on which people filled in their complaints was not secured. "It was very easy to read other people's data," said security researcher Tom Wolters.
'Leak had been around since March 17'
Participants in the Infection Radar are assigned a unique number. When filling out the form, that number was shown in the address bar. Whoever changed the number was shown a form by another participant.
The leak had existed since the introduction of Infection Radar on March 17. According to the RIVM, the newly completed forms were emptied every day. Those who discovered the leak only today could no longer download the forms from more than a day ago. But who already discovered the leak on March 17 would have seen all registrations so far. It is not known whether that happened.
The NOS has pointed out to RIVM the leak, on which the database has been taken offline. The software supplier has implemented a solution that is now being tested, RIVM writes on its website. It is also being investigated to what extent privacy-sensitive information has been viewed.
It is currently no longer possible to complete questionnaires. However, people can still register for the Infection Radar. According to RIVM, these data are stored in a different system.
Follow the latest developments around the virus in our live blog.
The coronavirus in short
- The coronavirus mainly spreads through sneezes and cough drops. Most patients have mild (flu-like) complaints. These are the symptoms.
- Read here what rules there are to contain the outbreak.
- We have also translated these measures into Arabic, English, Polish and Turkish.
- In our corona guide we give you an overview of all reliable information and what you should and can do now that you are at home a lot.