This article was published in 2020. Laws, case law and regulatory guidance may have changed since then. Contact us for up to date advice.
The Centre for Youth and Family (CJG) Rijnmond has been hit by a data breach following a phishing email. CJG Rotterdam, which among other things provides youth care in Rotterdam and the surrounding area, has warned current and former clients about a data breach. The data breach occurred because several employees fell for a phishing email. Through the phishing email, an attacker managed to gain access to the mailboxes of a number of employees.
After the data breach following the phishing email was discovered, CJG Rijnmond launched an investigation. This showed that data of a number of current and former clients may have been viewed, including names and address details and sensitive personal data such as the BSN (citizen service number). There was reportedly no access to client files, according to CJG Rijnmond.
Notification to the regulator
In its written statement, CJG Rijnmond states that it has informed all data subjects about the data breach by letter. A notification has also been made to the Dutch Data Protection Authority. CJG Rijnmond also states that it has tightened its internal policy for safe digital working (meaning its information security policy).
Cybercrime is on the rise
This incident is not an exception. Rather, it is a recurring problem that we see in our day-to-day practice. We see more and more organisations being hit by cybercrime. We read every day that criminals move with the times and look for all kinds of ways to claim victims digitally.
The economic consequences can be enormous. Cybercriminals can strike at the heart of your organisation, bringing your processes to a standstill. They can also steal confidential information and hold your systems to ransom. Last year, for example, a US hospital cancelled planned operations after ransomware was discovered in its network.
Take the right measures in good time
Cybercrime can be lucrative for criminals. It can cause you a great deal of trouble in the form of reputational damage and financial costs. The consequences can be severe. That is why it pays to take the right measures in good time for optimal information security. We can help you with this. Feel free to contact us, without obligation, for a Cybersecurity Healthcheck.