In 2011, I blogged this: <a href="https://web.archive.org/web/20130501172236/http://www.fernando.com.ar/2011/afip-filtra-informacion-privada/" rel="nofollow">https://web.archive.org/web/20130501172236/http://www.fernan...</a><p>I found the "leak" with a right click in my own data (images), then I changed the params in the URL without being logged in and it worked. Fingerprints, Scanned ID cards, Photos, and Signature, of <i>millions</i> of Argentine citizens. When I changed the ID in the URL, I used the ID (found in public sources) from a guy named like me. When I saw his face, ID card, fingerprint, and signature my jaw dropped. Years later AFIP took over the control on .ar TLDs (NIC.ar) and for strange reasons I could not renew my domain. :) Ten years ago. Its all leaked. Or at least we should asume so.
This is not a mere leak from some government office, but also includes a lot of "notes" by local Socialist Party staff that are assigned to "watch over" a small section of their local population, such as an apartment block or similar. The database contains details such as did this person vote for the Socialist Party, what kind of leverage do they have on him (govt jobs, business licenses, jobs of parents or kids), are they part of the diaspora, do they have foreign income, etc. There was a huge scandal about it a year or two ago, called the "patronazhist" scandal. You can read more here:<p><a href="https://balkaninsight.com/2021/04/16/albania-prosecutors-investigate-over-socialist-party-big-brother/" rel="nofollow">https://balkaninsight.com/2021/04/16/albania-prosecutors-inv...</a><p>The big issue is how the Socialist Party essentially organized the whole collection of this data neighborhood by neighborhood in a hierarchical fashion, it's very similar to a mafia franchise. A neighborhood party member reports to the larger district, who reports to the city official, who reports higher up all the way to the Prime Minister.
> The data provided included their ID number, name, father’s name<p>I am curious about the "father's name" part. Is it a security thing in Albania, kind of how "mother's maiden name" used to be a security question for my credit card in the US?
For a free market to be efficient, all price information should be public, including the price of wages.<p>Public price information would greatly benefit workers.
> The data provided included their ID number, name, father’s name, surname, date of birth, voting center, place of birth, residence code, list number, phone number, birthplace, employer, and whether they are likely to vote for the Socialist Party.<p>all of that should be public and not be used for "secret" questions
Reminds me of “No Way To Prevent This”, Says Only Industry Where This Regularly Happens:<p><a href="https://qbix.com/blog/2021/01/25/no-way-to-prevent-this-says-only-industry-where-this-regularly-happens/" rel="nofollow">https://qbix.com/blog/2021/01/25/no-way-to-prevent-this-says...</a>