Connect with us

News

Walgreens’ Patient Data Exposed Due to “Sloppy” COVID Test Registration System

Info of millions potentially exposed by system vulnerabilities, which remain unfixed

mm

Published

on

iStock, tupungato

The personal data of potentially millions of Walgreens patients who used the drugstore chain’s COVID-19 test registration system were exposed on the open web and available for collection by ad trackers, Recode reports.

The information includes names, dates of birth, gender identities, addresses, contact information, and in some cases, test results.

Multiple security experts said the vulnerabilities found on the site are basic issues that a company of Walgreens’ stature should have known to avoid. “Just the sheer number of third-party trackers attached to the appointment system is a problem, before you consider the sloppy setup,” Sean O’Brien, the founder of Yale’s Privacy Lab, told the outlet.

When Recode learned of the security problems and informed Walgreens, the outlet said it gave the pharmacy chain time to fix the security issues, but Walgreens did not do so.

“We regularly review and incorporate additional security enhancements when deemed either necessary or appropriate,” Walgreens said in response.

Read more at Recode.

Advertisement

Advertisement

FEATURED VIDEO

MasterClass: ‘Re-Sparkling’ Retail: Using Store Design to Build Trust, Faith and Brand Loyalty

HOW CAN WE EMPOWER and inspire senior leaders to see design as an investment for future retail growth? This session, led by retail design expert Ian Johnston from Quinine Design, explores how physical stores remain unmatched in the ability to build trust, faith, and loyalty with your customers, ultimately driving shareholder value.

Presented by:
Ian Johnston
Founder and Creative Director, Quinine Design

Promoted Headlines

Advertisement
Advertisement

Subscribe

Advertisement

Facebook

Most Popular