ENKR

Information Disclosure Portal: personal data exposed in published public documents

Add to my breach check

Made public

What leaked7

Hard to replace

  • Passport number
  • Home or delivery address
  • Other profile data

Permanent

  • Health information
  • Resident registration number
  • Date of birth
  • Full name
  • Health informationdiagnoses, disease codes and doctors' opinions on sick-leave documents
  • Resident registration numberfull 13-digit numbers on resident registration copies
  • Passport numberon travel authorisation approvals
  • Date of birthon travel authorisation approvals
  • Other profile dataflight booking numbers on e-tickets and boarding passes; visa numbers

To-dos2 · about 20 min in all

  1. Register as an exposed person with the FSSabout 10 minLimits harm from: applications with your ID (opens in a new tab)
  2. Block new loans and cards in your nameabout 10 minLimits harm from: applications with your ID (opens in a new tab)

What happened next6 events

  1. UndetectedNone on record
  2. Response 6 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. No secondary harm found so far · press
  2. By November 5, 2026, had all public bodies check published documents for personal data; plans new filtering software
  3. Apologised in the explanatory statement
  4. Explanatory statement admitted that personal data was exposed in some portal documents
  5. By November 5, 2026, had suspended downloads of original documents from the portal
  6. Confirmed the exposure on November 4, 2026 · press
Company
Information Disclosure Portal
Company detected it
Made public
Affected
unknown; people named in attachments of 35 documents of at least 22 public bodies, as the press found · the ministry is still checking the exact number

Sources