2023-05-05 15:55:00
It is a portal well known to the 2 million auto-entrepreneurs and micro-enterprises, who each week must declare their turnover themselves. The website of Urssaf, which collects and distributes contributions and taxes from these workers, has posted, by mistake, dconfidential data of more than 10,000 users. This information was shared with other users on the weekend of May 1, the public establishment said on Friday.
According to Urssaf, information from self-employed workers (craftsmen, traders and liberal professions) “having filed their tax return before April 27 were posted on the online account” other self-employed workers, following a “computer incident”.
Auto-entrepreneurs are not affected by the incident. However, the Urssaf site and social networks did not mention the incident on Friday. It indicates that it has warned the persons concerned, and provides the telephone number 36 98 “for any further information”.
When it realized its mistake, Urssaf removed the disputed files from online spaces, but it estimates that the information of 10,640 people may have been viewed by third parties.
“These people are advised to be vigilant regarding any suspicious banking movements” into their bank account, she said.
An informed citizen
Vincent Remlinger, an Alsatian interior decorator who had sounded the alarm very quickly in Rue 89 Strasbourg, indicated that he had had access to information from 115 professionals in the region, contained in a .pdf file of more than 450 pages shared by Urssaf on May 1.
“I was amazed that the document contained personal and sensitive information” as “their income from the past year, their schedule of social security contributions for 2023, their bank details, their secret identifiers to access Urssaf…”he told AFP.
He immediately contacted Urssaf via its online messaging system and also directly notified around twenty Alsatian lawyers appearing in the file. “I contacted them one by one, telling myself that they were the closest to the law and the best able to help me react. “, he said.
These professionals “all received bundles of fairly comparable documents, with information on their colleagues, their competitors”he added.
“I suspended the direct debit authorization from my bank account, and changed my access codes to Urssaf (…). I demand an independent investigation so that this cannot happen once more in the future,” he said.
Of the 7,400 people who received information by mistake, 1,650 consulted their online space with information regarding other people, said Urssaf.
(With AFP)
1683430837
#Urssaf #subscribers #personal #data #shared #mistake
