As revealed, the glitch appeared in the old software of TastSelv Borger which resultantly leaked citizen’s CPR numbers. This accidental exposure happened when the numbers appeared as part of the web address.
The accidental sending of CPR numbers is due to a software error which has caused CPR numbers to become part of a web address sent to Google and Adobe respectively.According to DXC Technology, the exposed data included records for about 1.26 million citizens’ CPR numbers over a five-year period. Specifically, the data ranged from February 2, 2015, to January 24, 2020. Whereas in another instance, the portal exposed 1330 citizen’s CPR numbers over a three-day period, that is, January 29, 2020, to February 1, 2020.
However, DXC confirmed that the exposed data did not include any other details, such as tax matters, payroll, or other similar information.
This is an older software bug that has been fixed today. It is important to note that in both cases there is no risk that the information sent encrypted has been misused. In one case, the information has been deleted as an integral part of the recipient process. Meaning it is neither logged in nor stored with Google. That one's information can be misused.Nonetheless, they are also ensuring necessary investigations of the matter. Besides, they also asked the Chamber of Commerce to evaluate the “basis for claim” against DXC over this security breach.
Let us know your thoughts in the comments.
