Analysis: CCMC & The Covid-19 Data Privacy Gap

Published on 2020-09-15

## The Context During the chaos of the COVID-19 pandemic, the **Covid-19 Crisis Management Centre (CCMC)** rolled out mandatory online forms for travelers. The goal was simple: track health status. The result? A massive aggregation of sensitive personal data—health history, citizenship numbers, and travel logs—collected in haste. ## The Incident It didn't take long for security researchers to notice something alarming. The CCMC portal had gaping security holes. In one iteration, it was possible...

Back to Blog