"The chain of events reads less like a breach and more like an own goal. In connection with a separate investigation, the man contacted the police on February 12 to report he had images that might be relevant. An officer responded by sending him a link so he could upload the files - except the link sent was a download link, effectively giving him access to confidential police documents."
"The man did not actively break in or exploit a vulnerability in the traditional sense; he simply clicked the link he was given and gained access to material he was never meant to see. Dutch cops say they told him to stop and delete the material, but he allegedly refused, saying he would only do so if he 'received something in return.' He did, in the end, get something in return - a trip in the back of a police car."
"Officers arrested the man Thursday evening, searched his home, and seized data storage devices to recover the documents and prevent them from being shared further. Police also offered a lesson in link etiquette, writing: "If you receive a download link knowing you should be receiving an upload link, are clearly told not to download, and then choose to download the files anyway, you may be guilty of computer trespassing.""
A 40-year-old man from Ridderkerk was arrested after he obtained confidential police documents when an officer sent a download link instead of an upload link during a separate investigation. The man clicked the link and accessed material he was never meant to see. Police instructed him to stop and delete the material, but he allegedly refused unless 'he received something in return.' Officers arrested him, searched his home, and seized data storage devices to recover files and prevent further sharing. Authorities reported the incident as a data breach and continue investigating. The nature and sensitivity of the exposed documents have not been disclosed. The charge cited is computer trespassing.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]