ID-Ware hack results in leak of PII of Dutch Parlimentarians [pdf]

Translation by DeepL:

A hack at the company ID-ware has leaked the data of the access passes of members of parliament, among others. The data can be found on a so-called leak site of a criminal group. The Telegraph has access to an e-mail from the security service of the Lower House which shows that investigations are currently being conducted by the National Cyber Security Center and the police, among others.

An internal e-mail from the head of security to MPs and staff, among others, states that personal data were leaked as a result of the hack. "A report has been made to the Personal Data Authority. A report has also been made to the police. Extensive investigations are currently taking place," the message reads.

The Volkskrant reports that ID-ware supplies access systems to at least dozens of companies and governments, including the Senate and House of Representatives. The company was hacked in late September by a criminal group using the hostage software ALPHV/BlackCat, according to their site on the darkweb. A large amount of ID-ware data was also stolen and put online. Customers of ID-ware include the Police Academy, Ministries of Justice and Security, Defense, Finance and Interior, but ProRail, TNO and Alliander also appear in the data.

It involves personal data - name, date of birth, pass details - from various organizations, including holders of Rijkspassen. "The systems of the Lower House itself have not been hit or hacked. Also, we know that the leaked information is not sufficient to create a pass that gives access to the buildings," reports the head of security at the House of Representatives.

If data of individual Kingdom pass holders has been leaked, they will be informed later. He urges MPs and staff to pay close attention to suspicious messages because of the risk of phishing. Other Rijkspas holders, including parliamentary journalists, have not yet received a warning message. According to a House of Representatives spokesman, that may follow later.