According to the Danish newspaper Politiken, at least three user accounts of the Danish IT company Pays used the password “123456” at the time a hacker gained access to the Danish Civil Registration System (CPR). One of these accounts was the company’s administrator account. The incident demonstrates how a weak basic security measure can have […]
Revolut has inadvertently leaked customer identity documents following a fraudulent data request.Criminals posed as a government agency and successfully bypassed security procedures. This incident demonstrates that even large fintech companies are vulnerable to sophisticated social engineering. The leaked documents significantly increase the risk of identity fraud for those affected.It highlights the urgent need for stricter […]
Medical records, dates of birth, and in some cases, citizen service numbers (BSN) from the Klein Iterson practice in Gouda have been published online. The attack has been claimed by the ransomware group LockBit 5.0. Patients are being warned about potential identity fraud and phishing attacks. Read the huisartsencentrumkleiniterson.nl article for more information.
The number of phishing reports more than quintupled in the first half of 2026: from 2,776 to 15,106, with nearly €492,000 in reported damages. Email now accounts for 59% of phishing reports, nearly double compared to 2025. WhatsApp is also being heavily exploited: in phishing related to booking platforms, 95% of approaches occurred via WhatsApp. […]
Oncology company Novocure reports that hackers gained access to internal systems in August, exposing the data of more than 1,400 American patients. For fewer than 50 patients, additional identifying information was stolen; contact and personnel data were also affected. According to Novocure, the attackers did not gain access to medical treatment equipment, and all systems […]
Cyberattackers have stolen personal data belonging to 8.7 million customers of three major UK airports. The breach affects Manchester, Stansted and East Midlands airports, exposing emails, phone numbers, vehicle registrations and postcodes. The compromised information came from services including parking, lounges, Fast Track bookings and airport Wi-Fi. Manchester Airport Group temporarily disabled its “Manage My […]
A security incident at logistics partner CEVA Logistics may have led to a data breach of customer information from bol and de Bijenkorf. Potentially compromised data includes names, addresses, email addresses, phone numbers, track & trace information, and order details. Bol and de Bijenkorf have informed the Dutch Data Protection Authority and are warning affected […]
Research by NOS and Nieuwsuur shows that municipalities are still publishing residents’ personal data in documents made public under the Open Government Act (Woo). This includes email addresses, phone numbers, addresses, citizen service numbers (BSNs), and ID numbers that have been insufficiently anonymized. Several municipalities have since removed the documents and reported a data breach […]
Lidl is warning webshop customers about phishing after attackers obtained personal data via an external IT service provider. Leaked data includes names, email addresses, phone numbers, dates of birth, and customer numbers of customers from the Netherlands, Belgium, and Germany. The exact cause and scope of the incident have not yet been disclosed. With this […]
Between March and November 2025, a 34-year-old fraudster opened no fewer than 47 bank accounts at ABN Amro by using deepfake technology during the identification process. He combined photos of himself with images of victims obtained through social media, data breaches, and fake rental advertisements. The accounts were used for purposes such as bank helpdesk […]