Exclusive: Health service revising its process as ‘seriously shocking failure’ allows access to medical data
The NHS is revising its process for booking Covid vaccinations after the discovery of a “seriously shocking failure” that leaked medical data from the site.
The website lets users make appointments using their NHS number or, if they do not have it to hand, some basic identity information. But in the process, users’ vaccination status is disclosed, allowing anyone who possesses basic personal details of a friend, colleague or stranger to find out what should be confidential medical information.
