The whistleblower who discovered people's private data could be seen on the Canterbury District Health Board's COVID-19 vaccination booking system says the breach is worse than the Government's letting on.
..................
In a statement, the Ministry of Health suggested the breach only allowed patients to view other patient's appointment details. But the original whistleblower says it was worse than that
They say they were also able to cancel and change appointments - even moving them 100 years in the past. And the weakness was not a coding error like the Ministry says, but rather incompetence from the developer.
"This should be a real scandal," says Chris Bishop, the National Party's COVID-19 response spokesperson.
About 50 people affected by a software error that allowed patients’ private information to be seen in the Covid-19 vaccination appointment booking system have been contacted by the Canterbury District Health Board (CDHB).
The error meant the details of 714 individuals who had registered were potentially able to be viewed.
The details included name, gender and age, but no personal health information.
.........
CDHB has confirmed the coding error meant that details of 714 individuals (two fewer than initially reported on Saturday) who had registered were potentially able to be viewed.