IDDEEA: No one hacked into our database

The Agency for Identification Documents, Records and Data Exchange of BiH (IDDEEA) rejects the allegations reported by media in BiH and the region, concerning a breach into the database maintained by IDDEEA for competent authorities, according to a statement from the agency, reports the Patria News Agency.

The photos of applications for searching the civil registry and travel documents database that were published are not applications under the jurisdiction of IDDEEA. The photos show an application that is no longer in use, and the fact that similar photos were published several years ago also supports this. Based on the photos published today and the analysis of logs, we assume these are the same photos from an application that is no longer functional.

The system records every activity performed by an authorized official, whether it is accessing data or processing data itself. If a person authorized to legally carry out procedures commits abuse, it cannot be considered a technical problem of the system. The system records all logs, and based on them, it can be precisely determined which institution, i.e., official, accessed the data and when, the statement reads.

The system maintained by IDDEEA connects 835 locations (ministries of internal affairs, registry offices, judicial institutions, law enforcement institutions, central and municipal election commissions, diplomatic-consular missions...). The security of the IDDEEA system is in line with European Union standards, and additional improvements and alignments with current standards are continuously being made.

All technical mechanisms recommended by the UN and European Conventions for data protection during electronic data processing are covered by the existing system.

The technical solutions regarding data protection are such that they form a closed system that does not use public communication channels, especially for locations in BiH. IDDEEA institutionally and organizationally forms resources capable of handling challenges related to attempts of illegal access to systems, and protection techniques consistent with the latest technological solutions are used, the statement concludes.