Dutch certificate authority denies significant breach

By
Follow google news

Internal documents pilfered from vulnerable web database.

Dutch telco KPN has denied digital certificates were lost after its subsidiary Gemnet was hacked.

Dutch certificate authority denies significant breach

MacWorld Netherlands reported today that government public key infrastructure (PKI) certificates may have been exposed after Gemnet's website was hacked and internal documents were compromised.

But while Gemnet admitted to the breach, it was quick to deny that certificates were exposed.

Earlier last month Gemnet, a services company for Dutch local municipal governments, said it had stopped the issuance of certificates as a preliminary caution. Days later, it resumed normal operations.

In a translated statement the company said that the "hack of the site has no connection with the issuance and management of government PKI certificates".

Breached Gemnet internal documents appeared to have resided on a web database managed by PHPMyAdmin that did not have an access password set.

Gemnet has taken down its home page and is investigating the incident.

Remember to sign up to our Security bulletin for the definitive summary and analysis of Infosec threats.

Add iTnews as your trusted source

Got a news tip for our journalists? Share it with us anonymously here.

Copyright © SC Magazine, Australia

Tags:

Most Read Articles

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

Critical flaws strike PHP as disclosure embargo is broken

Critical flaws strike PHP as disclosure embargo is broken

ASD’s Essential Eight replacement moves away from maturity ladder

ASD’s Essential Eight replacement moves away from maturity ladder

Cloudflare warns fixing botched eMudhra certs goes beyond browsers

Cloudflare warns fixing botched eMudhra certs goes beyond browsers

Log In

  |  Forgot your password?