The Flevo Hospital in Almere mistakenly had the email addresses of 800 patients leaked on Thursday. This happened when an email was sent with information about a new app and its use. According to the hospital, this mainly concerned patients in the gastrointestinal and liver department. When the email was sent around 4:30 p.m., the bcc function was not used, so that the patients could see the email addresses of other people, writes Omroep Flevoland.
An investigation is now underway about how the leak could have occurred. The hospital also reported the data breach to the Dutch Data Protection Authority. According to the General Data Regulation, or GDPR, companies and institutions are obliged to report a data breach to the privacy supervisor within 72 hours after discovering a data breach.