A Dutch reporter has managed to log into a supposedly highly secure EU videoconference, using a pin-code that had been accidentally exposed on the country’s defense minister’s Twitter account.
The ‘hack’ occurred on Friday, when RTL Nieuws journalist Daniel Verlaan managed to sneak into the online gathering of the EU bigwigs. Footage of the incident, shared by the reporter online, shows a smiling Verlaan waving to the officials, many of whom were not exactly glad to see the reporter — while others laughed.
The journalist was confronted by EU Foreign Affairs and Security Policy boss Josep Borrell, who asked Verlaan to present himself and said the conference had been intercepted.
“You know you have been jumping into a secret conference?” Borell asked.
The journalist apologized for the intrusion, saying he would be leaving, while Borell threatened him with legal consequences insisting the breach was a “criminal offense.”
After the reporter left, the meeting was reportedly immediately cut short due to the security breach. The videoconference was said to have been held to discuss a classified document on the threats the EU is facing, that will form the basis for the bloc’s defense strategy.
It was not immediately clear whether the broadcaster or the reporter will actually face any consequences. The breach was made possible after RTL Nieuws received a tip, directing their attention to a screenshot of the conference, shared online by Dutch Minister of Defence Ank Bijleveld.
Dit was de oorspronkelijke foto die vanaf het account van minister Bijleveld werd gedeeld, met daarin de meeting-ID en vijf cijfers van de pincode. Het was een zescijferige pincode. Ik joinde met de naam ‘admin’. pic.twitter.com/Fztrbqm5FR
— Daniël Verlaan (@danielverlaan) November 20, 2020
The picture showed an address prompt, containing five digits of a pin code, needed to access the private conference. The whole code turned out to be six digits long and Verlaan had to guess the last number. He said he used ‘admin’ as the username – and was admitted to the meeting without any further authentication.
The reporter said he did not believe it would work until the very last moment, especially since the EU claimed it had more security measures in place.