Personal information displayed to others on NY’s health exchange website
Kimberly Howard reports:
The New York State Department of Health is responding to an issue with the state’s health exchange website that allowed users to see the private information of other people.
One user, who did not want to speak on camera, sent CBS6 a screen grab of what he says he saw when he logged in over the weekend. The individual was listed as female and had a completely different name than the man who contacted CBS6. There was other personal information listed as well, including the person’s date of birth, their address, two phone numbers, an email address and the last four digits of the social security number.
Read more on CBS. As of the time of this posting, I see no notice on DOH’s web site or the health exchange’s web site. The state needs to be more transparent about this: how did this happen and for how long were personal data exposed this way?