UWV informs victims about leaked personal data from 150,000 CVs

The Dutch Employee Insurance Agency has started informing victims of the recent data breach in which 150,000 CVs were accessed by one person. It varies per victim as to what information was stolen during the incident.

The 150,000 CVs were uploaded by people to the werk.nl website and the settings of their account on that site appear to have determined which information was visible. Tweakers has viewed emails from the UWV to several victims. For some, their CV was uploaded as private to werk.nl, which in principle shielded their personal data, although basic information about applications and possibly a telephone number could also be viewed.

For other users of werk. nl, various personal data have been leaked. This includes name, gender, date of birth, address, zip code, place of residence, e-mail address and telephone number. In both cases, the government body advises victims to be vigilant against scammers. The agency says it never asks for payment details by telephone.

Last week it was announced that the UWV had been hit by a data breach in which 150,000 CVs were viewed and possibly downloaded by an unauthorized person. The agency has reported it to the Dutch Data Protection Authority and says it is preparing a declaration.