The files of thousands of vulnerable children have been leaked. This is due to an error by Bureau Jeugdzorg Utrecht when switching domain names after a name change.
RTL News received the files of vulnerable children from two whistleblowers, checked them for authenticity and analyzed their contents. The analysis revealed that the files contain extensive accounts of vulnerable children's situations and problems. The files are linked to their names and dates of birth. Internal emails from Youth Care with voicemail messages were also leaked.
Old domain name cancelled
The information could leak because Jeugdzorg made a mistake after a name change. Bureau Jeugdzorg Utrecht was renamed Samen Veilig Midden-Nederland (SAVE) in 2015. Then, in 2018, the website with the old name went offline. In the process, the old domain name was not renewed. However, unsecured internal emails with patient files were still automatically sent to email addresses linked to the old domain name. Anyone who would re-register the old domain name could retrieve and view the emails. So that is what the two whistleblowers did.
The SAVE board has since apologized. Furthermore, an investigation has been launched by SAVE and the incident has been reported to the Autoriteit Persoonsgegevens (AP). The AP has indicated that it is taking the incident very seriously.
This news item can also be found in the Youth & Education and Data Breach file.
