USR has discovered a vulnerability in the Sector 5 City Hall platform, which allows unauthorized access to the personal data of citizens.

USR has alerted about a serious vulnerability in the platform managed by the Sector 5 City Hall, used for the online scheduling of citizens. This allows the automatic completion of the form with personal data associated with an email address, without an adequate mechanism for verifying the user's identity. Thus, sensitive information such as names, personal identification numbers, and phone numbers can be accessed without authorization.

USR Sector 5 has sent official complaints to the City Hall and the National Authority for the Supervision of Personal Data Processing, requesting an urgent verification and remediation of the vulnerability. The incident is all the more serious considering a previous scandal in 2024, when the data of approximately 200,000 people were compromised. Mihai Ionescu, USR local councilor, criticized the administration for the lack of adequate security measures, emphasizing that citizens need to be aware of the risks they are exposed to.