Hacker News Reader

Could anybody please elaborate, in which way the mishandling happened? The author seems to claim it happened because of cloud management personell, but from linked articles it seems swedish agency staff has published wrong datasets. So this exact leak is not up to how cloud was handled, but how the data (regardless of where stored) was handled by authorized personell, no?

View on HN

Both. To make a project deadline, the department head signed a waiver to bring on personal without security clearance.

Apparently, companies may subscribe to the vehicle registry. One batch contained people with protected identities. Instead of asking customers to destroy the registry and sending a new, without sensitive information, the Transport Agency sent an open e-mail with all registration and chassis numbers of all those cars owned by persons with a protected identity. The companies were then asked to clean the sensitive data themselves.

Reply on news.ycombinator.com