When copies of ID cards or passports are stolen during a data breach, it is advisable for employees of the affected organization to apply for a new ID from their municipality.
This advice is provided by Project Melissa: a partnership of the Public Prosecutor's Office (OM), the police, the National Cyber Security Center (NCSC), Cyberveilig Nederland and several cybersecurity companies.
Project Melissa has provided an advisory document. This describes how organizations can prevent secondary victimization when digital copies of personal IDs have been compromised by a data breach.
According to the partnership, a sensible measure is to replace the ID with a new one and have the old one invalidated by the municipality. "It is good to advise this to affected employees and explain how to arrange this. It is nice for employees if they receive a roadmap from the organization on how to apply for new identity cards and have their old ones invalidated," the document reads.
Click here for Project Melissa's advisory document.