Walgreens’ Covid-19 test registration system exposed — and still exposes? — patient data
Sara Morrison reports:
If you got a Covid-19 test at Walgreens, your personal data — including your name, date of birth, gender identity, phone number, address, and email — was left on the open web for potentially anyone to see and for the multiple ad trackers on Walgreens’ site to collect. In some cases, even the results of these tests could be gleaned from that data.
The data exposure potentially affects millions of people who used — or continue to use — Walgreens’ Covid-19 testing services over the course of the pandemic.
Read more on Recode.
It is hard to understand how multiple security experts can confirm that this is a problem and yet Walgreens has not addressed it to lock the data down.