Personal data of tens of thousands of people who have been tested for corona are "easily" accessible in a database of the commercial testing company U-Diagnostics.
This is evident from a research published by
Passport numbers, BSN numbers, email addresses and results of tested people can be viewed via the database,
Researchers were given access to a WhatsApp group comprising three hundred U-Diagnostics employees.
Login details were shared in the group, which enabled
enter the company's database.
The system was accessible without additional security.
For example, information could be viewed from tourists who booked a holiday through TUI or Corendon, but also from players from FC Utrecht and from GP practices and healthcare institutions.
In addition, the Ministry of Defense has deployed military personnel tested at U-Diagnostics.
The ministry tells
Nieuwsuur it has
immediately suspended corona tests for soldiers.
A report has also been made to the Dutch Data Protection Authority.
that it does not violate the privacy law.
According to the company, the use of the WhatsApp group is "allowed because it only contains employees".
The database is, however, extra secure since
its findings to the company.
U-Diagnostics does not perform the daily tests that are carried out on behalf of the government.
These tests are carried out by the GGD.