FADL’s Guard Bureau has recently revealed a significant breach of personal data security, where sensitive information about their guards, including personal identification numbers (CPR numbers), addresses, and salary details, was unintentionally accessible on the internet. The security breach has affected guards who have been affiliated with the bureau from January 2013 to June 2024.

According to the bureau, the information was exposed through URL paths to transport folders that contained payslips. These folders were stored on a web server and were not supposed to be publicly accessible. When FADL became aware of the breach on July 23, 2024, the paths were immediately rendered inaccessible, and relevant authorities, including the Danish Data Protection Agency (Datatilsynet), were notified.

While FADL assesses that the risk of misuse of the exposed information is low, as the paths were not easily accessible, they nevertheless advise their guards to remain vigilant. They encourage measures such as placing a credit alert in the national Personal Identification Register (CPR register) to prevent potential misuse of the exposed data.

This breach serves as yet another reminder of the serious consequences when personal data is not adequately protected. In an era where data attacks and security breaches are becoming more common, this incident underscores the importance of having robust security measures in place.