Walgreens COVID-19 test registration system left patient data unprotected – Recode – Reuters

People work behind a pharmacy counter at a Walgreens store in Chicago, Illinois, U.S. February 11, 2021. REUTERS/Eileen T. Meslar
Sept 13 (Reuters) – Drugstore chain Walgreens Boots Alliance's (WBA.O) COVID-19 test registration system exposed data of potentially millions of people, including their phone numbers and email addresses, Recode reported on Monday.
The data also exposed names, dates of birth and gender identities on the open web for potentially anyone to see and for the multiple ad trackers on Walgreens' site to collect, the report said. (https://bit.ly/3AdXgoE)
In some cases, the results of these tests could also be taken from the exposed data, the report added.
Active unique patient IDs could be guessed, or a hacker could create a bot that rapidly generated URLs with the IDs in the hope of hitting active pages, security experts told Recode, giving them a source of biographical data about people they could potentially use to hack their accounts on other sites, according to the report.
Given how many characters are in the IDs and therefore how many combinations there are, the security experts said it’d be close to impossible to find just one active page this way, the report said.
"We routinely evaluate our technology solutions in order to provide safe, secure, and accessible digital services to our customers and patients and we regularly review and incorporate additional security enhancements when necessary," Walgreens said in a statement.
Our Standards: The Thomson Reuters Trust Principles.
Subscribe for our daily curated newsletter to receive the latest exclusive Reuters coverage delivered to your inbox.
Robin Geoulla had doubts about the automated driving technology equipped on his Tesla Model S when he bought the electric car in 2017.
Reuters, the news and media division of Thomson Reuters, is the world’s largest multimedia news provider, reaching billions of people worldwide every day. Reuters provides business, financial, national and international news to professionals via desktop terminals, the world's media organizations, industry events and directly to consumers.
Build the strongest argument relying on authoritative content, attorney-editor expertise, and industry defining technology.
The most comprehensive solution to manage all your complex and ever-expanding tax and compliance needs.
The industry leader for online information for tax, accounting and finance professionals.
Information, analytics and exclusive news on financial markets – delivered in an intuitive desktop and mobile interface.
Access to real-time, reference, and non-real time data in the cloud to power your enterprise.
Screen for heightened risk individual and entities globally to help uncover hidden risks in business relationships and human networks.
All quotes delayed a minimum of 15 minutes. See here for a complete list of exchanges and delays.
© 2021 Reuters. All rights reserved