HomeLatest ThreadsGreatest ThreadsForums & GroupsMy SubscriptionsMy Posts
DU Home » Latest Threads » Forums & Groups » Places » International » United Kingdom (Group) » NHS Covid jab booking sit...

Thu May 6, 2021, 04:37 PM

NHS Covid jab booking site leaks people's vaccine status

NHS Digital is revising its process for booking Covid vaccinations in England after the discovery of a “seriously shocking failure” that leaked medical data from the site.

The website lets users make appointments using their NHS number or, if they do not have it to hand, some basic identity information. But in the process, users’ vaccination status is disclosed, allowing anyone who possesses basic personal details of a friend, colleague or stranger to find out what should be confidential medical information.
The problem comes because of the different responses the vaccination website gives to users based on their vaccination status. For users who have not had any jabs, entering personal details takes them straight through to a standard screening page, while for users who have had their first shot and booked their second, they are presented with a screen asking for their booking reference to continue.

But for those people who have received both vaccinations, simply entering the basic biographical information takes them straight to a page that says “you have had both of your appointments”. Worst of all, for those users who have had only one jab through a GP and have not booked a second, the screen lets them book their follow-up then and there, without any further verification.


All it takes are first name, last name, date of birth and postcode. What a screw-up.

1 replies, 348 views

Reply to this thread

Back to top Alert abuse

Always highlight: 10 newest replies | Replies posted after I mark a forum
Replies to this discussion thread
Arrow 1 replies Author Time Post
Reply NHS Covid jab booking site leaks people's vaccine status (Original post)
muriel_volestrangler May 6 OP
Backseat Driver May 6 #1

Response to muriel_volestrangler (Original post)

Thu May 6, 2021, 04:41 PM

1. Then there's on-line DNA purchasing/testing/results info

around cyberspace...

Reply to this post

Back to top Alert abuse Link here Permalink

Reply to this thread