Fake travel tests: major data breach at a coronavirus testing company

A major data breach at Testcoronanu, a coronavirus testing company, made it possible to get fake travel certificates and admission tickets in the CoronaCheck app — without even taking a test.

But by adding just two lines of code in their web browsers, people could fill in their details, enter what kind of test they wanted, when they took it, and what the result was, reports RTL Nieuws. It was also possible to manipulate the test results or testing dates of others — for example, by marking a negative test as positive.

Experts say these kind of fake test results are not only a danger to public health — but can also have a detrimental impact on the public’s confidence in the CoronaCheck app.

Data of 60,000 people leaked

As if that wasn’t enough, the leak gave access to the private data of over 60,000 individuals. This included not only names and email addresses but also phone numbers, residential addresses, BSNs, passport numbers, and medical information, such as whether an individual has tested positive in the past. 

“Testcoronanu.nl manages your personal data with the greatest care,” reads the company website, a laughable message in the wake of the scandal.

“This data breach is very shocking,” tells Frederik Zuiderveen Borgesius, professor of ICT & Law at Radboud University, tells RTL Nieuws. 

“It doesn’t get much more sensitive than this. This is exactly what medical privacy is for: that people dare to get tested because they trust that their data is safe,” he adds.

Official testing partner

Testcoronanu was not only recommended by the government as one of the affiliated travel test providers, but also received subsidies to operate.

The company has 10 testing locations in the Netherlands and three in Belgium, all of which have been closed since Sunday. 

The Ministry of Health, Welfare and Sport is now investigating how the company was accepted as an official testing partner.

Very serious breach

The Dutch Data Protection Authority classifies this breach as very serious. Testcoronanu may only start testing and processing data again if “security and reliability are guaranteed.”

The Ministry of Health, Welfare and Sport says that there are no indications that anyone else except the RTL Nieuws journalists had access to the database.

How do you feel about this data breach? Tell us in the comments below!

Feature Image: Gaudilab/Depositphotos

Jana Vondráčková 🇨🇿
Jana Vondráčková 🇨🇿
Originally from the Czech Republic, Jana moved to the Netherlands for her studies. She fell in love with the local biking culture, and you’ll see her drifting through the streets of Rotterdam on her pink bike even in the worst possible weather (think rain, snow, hail, or all three). Besides advocating for Rotterdam as the best Dutch city, she likes to wander around with a camera in her hand.


Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Related posts

Latest posts

Considering an MBA in Amsterdam? Meet Nyenrode Business University

You thought your student days were behind you, but lately, you’ve been toying with the idea of getting an MBA. Good on you!  Deciding where...

This Dutch city’s ‘walking’ forest is making the world green with envy

The Dutch city of Leeuwarden is greener than usual this summer, with 1000 portable trees moving around the centre. The walking forest has been...

Amsterdam ranks in the top 10 dream cities to work in!

A lazy cycle to work alongside some of the best canals in Europe: Amsterdam has been named the 9th best city in the world...

It's happening

The latest Dutch news.
In your inbox.