Huge data leak in the Netherlands. The addresses of all the homeowners were on the net

As a result of an extremely serious error, anyone could check the details of any property owner in the Netherlands without their consent or authorization. The leak they describe was first reported by RTL Nieuws, but the reports have already been confirmed by the local authorities, including the data protection authority (AP), which called the incident “very serious”.

Big data leak in the Netherlands. Anyone could look at the land register

The massive leak is the result of a vulnerability in the Kadaster National Land Registry. As a result of the error, almost anyone could create an account in the registry and gain access, for example by providing false data. Without verification and any authorization. Under normal circumstances, it is mainly bailiffs and notaries who are able to set up an account and enter the database.

This means that for some time almost anyone could check the personal data and address of any person who owns an apartment or house and is actually listed in the national database. It is not difficult to guess that such data is extremely valuable to criminals. As the Dutch data authority wrote, the vulnerability “posed a great risk”, among other things. for journalists, activists and politicians, but also for anyone who may be a potential victim of a stalker.

The Office noted that it immediately contacted the company operating the registry with a request to patch the gap as soon as possible. It is not certain whether the personal data of the Dutch could have fallen into the wrong hands before it was removed. It is also not known how long the vulnerability remained unpatched. However, the company managing the registry has already confirmed that the system has been repaired and additional verification of people who try to set up an account in it has been introduced.

The big problem of the Dutch. The vulnerability still exists?

The Dutch AP body believes that there are still many government databases and records where citizens’ personal data may not be adequately protected. The AP called on the Council of Ministers to amend public records to protect them from “misuse”. The homeowners’ association Vereniging Eigen Huis (VEH) is demanding that the Home Office, together with the company responsible for the registry, set up a crisis team to ensure the privacy of homeowners.

The association further claims that the problem has been present for years and – despite this – no one has tried to solve it. The VEH also said it discovered the vulnerability as early as 2018, but it has not been patched and data such as ID numbers, mortgage value and personal details of the partner with whom the home has been purchased so far “can be obtained online” and some are still available. able to get them.