Feeds

Dutch news agency goof leaks VIP phone numbers

Low security in the Low Countries

Internet Security Threat Report 2014

Security shortcomings by Dutch press agency GPD exposed the private telephone numbers of politicians and other public figures to prying eyes until earlier this week.

Former telephone numbers of controversial anti-immigration MP Geert Wilders and an old (now disconnected) mobile, formerly belonging to prime minister Jan Peter Balkenende, were left exposed by the leak. Current phone numbers exposed by the snafu included those of TV presenters Mart Smeets, Jort Kelder and Felix Meurders, as well as those of hundreds of other celebrities and media figures in The Netherlands.

The exposed numbers were held on a communal database maintained by reporters at the agency. Technology site Tweakers discovered that the database was only protected by an easily-guessed password. Confidential telephone and other information was left open to anyone with enough nous to construct an appropriate Google search.

GPD has acknowledged the error and padlocked its database to protect sensitive information, Dutchnews reports.

Expatica adds that GPD is blaming a configuration error for the snafu, which exposed what ought to have been an internal intranet-only application to the great unwashed.

Dutch news outlet NOS has a story that contains a screen shot from Google returning the prime minister's mobile number (cropped out) here. And there's more on the story (for Dutch speakers) at nu.nl here.

The incident is not the first time GPD has made the news itself as a result of information security shortcomings. In November 2007, two officials from the Ministry of Social Affairs were caught lifting information from the GPD database using the credentials of a former employee. ®

Bootnote

Thanks to Dutch reader Edwin for the tip on this story.

Internet Security Threat Report 2014

More from The Register

next story
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.