Democratic Progressive Party (DPP) lawmakers yesterday accused government agencies of negligence and dereliction of duty following reports of major personal data breaches, which they said have seriously compromised national security.
Since 2016, there have been eight major cases of personal data leaks at government agencies and state-run enterprises, they said.
“This has stoked public anger, as government officials have shown little concern and a lack of urgency in dealing with these national security breaches,” DPP Legislator Liu Shyh-fang (劉世芳) told a news conference at the Legislature Yuan in Taipei.
Photo: CNA
Private data breaches have occurred repeatedly, but government officials treat them on a “case-by-case” basis and have not taken concrete action to plug these leaks, DPP Legislator Hung Sun-han (洪申翰) said.
“I have yet to see any government agency take an assessment, and pinpoint the weaknesses and vulnerabilities in our personal data storage systems,” he said.
“The new Ministry of Digital Affairs should shoulder the responsibility of coordinating with judicial investigation agencies and national security units to assess the nation’s information security system, recommend ways to enhance personal data protection, and come up with a new national strategy to prevent [data leaks] and strengthen information security,” he said.
The ministry, which started operating last year, oversees the Administration for Cyber Security, whose stated aim is to boost cybersecurity defense to protect “critical information infrastructure,” implement the Cyber Security Management Act (資通安全管理法), build a resilient, secure, smart country, and connect competent authorities to expand national cybersecurity defense mechanisms, he said.
“If the ministry and the Administration for Cyber Security cannot deal with these personal data breaches, why were they established in the first place?” Hung asked.
Liu and Hung presented a list of major data leaks over the past seven years that were either an inside job by government bureaucrats or due to hackers.
They included the theft of 17,000 transaction records at state-run Chunghwa Post Mall in May 2016 by hackers based in China and 58,000 personal data files at the Ministry of Labor’s Workforce Development Agency in July that year.
An incident at the Ministry of Civil Service in June 2019 led to the leak of 200,000 civil workers’ personal files, which were put on sale on foreign Web sites, while local household registration records were placed on sale on the Darknet in May 2020, allegedly by workers in the Ministry of the Interior’s Department of Household Registration (戶政司), the lawmakers said.
These were followed by several major breaches last year — another household data leak in October from the same department, and hackers penetrating government-run Taoyuan General Hospital last month and stealing patients’ and medical personnel files, they said.
This month saw a major security breach at China Airlines, with hackers allegedly stealing the personal data of customers, including Taiwanese business leaders, politicians and celebrities.
It was followed by a major leak of the National Health Insurance data of officers at 11 national security and military agencies, they said.
It was allegedly masterminded by Yeh Feng-ming (葉逢明), a former chief secretary of the National Health Insurance Administration (NHIA), working in collusion with other agency staff, with the information reportedly being passed on to Chinese intelligence officials during Yeh’s trips to China in the past 10 years, media reports said.
Investigation reports allegedly show that Yeh and his family hold more than NT$1 billion (US$32.97 million) in overseas bank accounts.
DPP Legislator Lai Pin-yu (賴品妤) said that the nation lacks independent bodies to oversee personal data protection at government agencies.
“Those bodies currently tasked with scrutinizing internal breaches and data theft are not doing their job. It is unbelievable that vast amounts of government-held private information have been stolen and sold to foreign countries,” she said.
“If this situation is not dealt with in earnest, the public would lose faith in the government,” she said.
SPACE VETERAN: Kjell N. Lindgren, who helps lead NASA’s human spaceflight missions, has been on two expeditions on the ISS and has spent 311 days in space Taiwan-born US astronaut Kjell N. Lindgren is to visit Taiwan to promote technological partnerships through one of the programs organized by the US for its 250th national anniversary. Lindgren would be in Taiwan from Tuesday to Saturday next week as part of the US Bureau of Educational and Cultural Affairs’ US Speaker Program, organized to celebrate the 250th anniversary of the signing of the Declaration of Independence, the American Institute in Taiwan (AIT) said in a statement yesterday. Lindgren plans to engage with key leaders across the nation “to advance cutting-edge technological partnerships and inspire the next generation of scientists and engineers,”
The Chinese Nationalist Party (KMT) caucus yesterday said it opposes the introduction of migrant workers from India until a mechanism is in place to prevent workers from absconding. Minister of Labor Hung Sun-han (洪申翰) on Thursday told the Legislative Yuan that the first group of migrant workers from India could be introduced as early as this year, as part of a government program. The caucus’ opposition to the policy is based on the assessment that “the risk is too high,” KMT caucus secretary-general Lin Pei-hsiang (林沛祥) said. Taiwan has a serious and long-standing problem of migrant workers absconding from their contracts, indicating that
UNREASONABLE SURVEILLANCE: A camera targeted on an road by a neighbor captured a man’s habitual unsignaled turn into home, netting him dozens of tickets The Taichung High Administrative Court has canceled all 45 tickets given to a man for failing to use a turn signal while driving, as it considered long-term surveillance of his privacy more problematic than the traffic violations. The man, surnamed Tseng (曾), lives in Changhua County and was reported 45 times within a month for failing to signal while driving when he turned into the alley where his residence is. The reports were filed by his neighbor, who set up security cameras that constantly monitored not only the alley but also the door and yard of Tseng’s house. The surveillance occurred from July
TRADE-OFF: Beijing seeks to trade a bowl of tempura for a Chinese delicacy, an official said, while another said its promises were attempts to interfere in the polls The government must carefully consider the national security implications of building a bridge connecting Kinmen County and Xiamen, China, the Public Construction Commission (PCC) said yesterday. PCC Commissioner Derek Chen (陳金德), who is also a minister without portfolio, made the remarks in a meeting of the legislature’s Transportation Committee, after Democratic Progressive Party Legislator Hsu Fu-kuei (徐富癸) asked about China’s proposal of new infrastructure projects to further connect Kinmen and Lienchiang (Matsu) counties with Xiamen. China unveiled the bridge plan, along with nine other policies for Taiwan, on Sunday, the last day of Chinese Nationalist Party (KMT) Chairwoman Cheng Li-wun’s (鄭麗文) visit