AZOP Links Data Breach to Croatian Insurance Bureau

The Personal Data Protection Agency (AZOP) has determined that the data structure of over a million vehicle owners that leaked matches the records of the Croatian Insurance Bureau, and that this data, according to currently available information, is not accessible to the general public.

Through supervisory actions at the Croatian Vehicle Center, the Ministry of the Interior, and other legal entities connected to the breach, it was found that they do not possess all the data contained within the disputed file delivered indirectly by the media to the agency on a USB stick and that they do not have the ability to manage such a data structure, the agency reported on Friday.

They noted that it was established that the data structure provided to them matches the records held by the Croatian Insurance Bureau as the data controller.

AZOP emphasizes that, like other competent authorities, it is conducting further supervisory actions to determine all relevant circumstances surrounding the disclosure of personal data from the Croatian Insurance Bureau’s database and will further inform the public upon completion of the proceedings.

– According to currently available information, personal data is not accessible to the general public, but has been provided to the competent authorities conducting actions within their jurisdiction – they stated.

At the end of May, Večernji list reported that it was in possession of a document regarding a report to the Security and Intelligence Agency (SOA) due to the leak of 2,444,587 records about vehicles belonging to 1,195,052 individuals, including data such as names, addresses, personal identification numbers, birth numbers, dates of birth, registrations, and other data about vehicles and their insurance policies.

The Deputy Prime Minister and Minister of the Interior Davor Božinović then stated that intensive investigations are ongoing regarding how the data about vehicles and their owners leaked, emphasizing that this data did not leak from the Ministry of the Interior, nor is it present in the public domain.