Security researchers hacked the demo version of the European Commission’s new age verification app in less than two minutes
The European Commission’s new age verification application was successfully compromised by security researchers in under two minutes during a demonstration. The rapid breach of the demo version raises significant concerns about the system’s security before any wider deployment.
Age verification systems typically require users to submit sensitive personal information to third-party vendors, including facial scans, government-issued identification, or payment card details. Each data collection point represents a potential security vulnerability where personal information could be leaked or misused by malicious actors.
The incident highlights the tension between implementing age verification requirements—intended to protect minors from adult content—and protecting user privacy and data security. Privacy advocates have long warned that such systems, while well-intentioned, create unnecessary data collection infrastructure that poses significant risks to personal information.
The European Commission will need to address these critical security gaps before proceeding with broader deployment of the age verification system. The demonstration serves as a stark reminder that regulatory frameworks designed to protect children must also incorporate robust security measures to safeguard the sensitive personal data of all users.