Walgreens' Mobile App Exposes Customers' Info
An error in the app allowed some secure chat users to see medical information that wasn't theirs.
A flaw in pharmacy giant Walgreens' mobile app has exposed its customers' personal and medical information, according to a notice provided to the California attorney general's office.
According to the notice, Walgreens discovered the breach on January 15 and immediately shut down the personal secure messaging feature of the app, where the problem was found. First and last names, prescription numbers and drug names, store numbers, and shipping addressed (where applicable) might have been visible to users other than the information's owners in the app's messaging section between January 9 and January 15.
Walgreen's has stated that the messaging feature will be disabled until it can be sure the issues have been remediated. It also said it will enhance its testing regimen to make sure similar problems don't occur in the future.
Read more here.
Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's featured story: "How to Prevent an AWS Cloud Bucket Data Leak."
About the Author
You May Also Like
DevSecOps/AWS
Oct 17, 2024Social Engineering: New Tricks, New Threats, New Defenses
Oct 23, 202410 Emerging Vulnerabilities Every Enterprise Should Know
Oct 30, 2024Simplify Data Security with Automation
Oct 31, 2024