Walgreens' COVID testing site could expose customer data: report
NEW YORK - Walgreens' COVID-19 test appointment registration system has left customers' personal information exposed online for months – and still does – according to a new report.
The purported breach was discovered by tech consultant Alejandro Ruiz in March after one of his family members registered for a test through the site, Vox's Recode reported Monday. Ruiz said that Walgreens was unresponsive when he brought the issue to the company's attention via phone, email and its own online security form, and that the problem has still not been fixed despite Recode giving the company time to address the issue before publishing.
According to the outlet, a slew of information on any of the millions of Americans who have registered with Walgreens for testing can be viewed on an individual's assigned URL by anyone who has access to a customer's browsing history, such as an employer with access to the customer's computer. It's also possible that the sensitive information – which includes the date of birth, mailing address and email address of users – could be accessed by a "determined hacker" trying to use bots to guess the specific URL for a user's registration page.
SIGN UP TODAY: Get daily headlines, breaking news emails from FOX6 News
Recode reported, "But, given how many characters are in the IDs and therefore how many combinations there are, [experts] said it’d be close to impossible to find just one active page this way — even with the millions of them out there."
Walgreens pointed to that line when reached by FOX Business for reaction to the article, while Recode noted, "of course, close to impossible is not the same as impossible."
FREE DOWNLOAD: Get breaking news alerts in the FOX6 News app for iOS or Android
"Protecting personal information of our customers and patients is a top priority," Walgreens said in its official statement to FOX Business. "They trust us with their health and wellness needs, and we take that responsibility seriously. That includes making sure their data is safe and secure."
Walgreens added, "We routinely evaluate our technology solutions in order to provide safe, secure, and accessible digital services to our customers and patients and we regularly review and incorporate additional security enhancements when necessary."
Featured
Elmbrook schools mask possibility divides parents
Just a couple of weeks into the new school year, districts are still having heated debates about what their classrooms should look like. Even the possibility of requiring masks leading to a packed meeting in Elm Grove.
Featured
Kenosha school mask vote threats, groups call for unity
A coalition of teachers, parents and more in Kenosha say it's time to come together after Kenosha Unified School District School Board members received threats stemming from a vote on masks.