Live data from Hacker News

Covid Test Data Breach: 1.3M Patient Records Exposed Online

vpnmentor.com

41–50 of 143 posts

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#41
post #11

Earlier quoted context omitted.

[flagged]

Probably getting downvoted because somehow this is still a politicized issue :/

There is a certain strain of discourse that goes "what? me politics?", getting upset when their obviously politically charged just-asking-questions narrative is called out as such. Concerning at best, antisocial at worst.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#42
post #24

Earlier quoted context omitted.

Why does it need to be logged and stored by a third party? I'd not have a problem with an employer offering daily on-site testing with no persistent logging for people who have to be on-site but for whatever reason can't be vaccinated, or if they're having outbreak problems in the area. If no one stored it, there would be nothing to get leaked when the eventuality of data breach happens. Storing it is not in the best…

Medical records are typically stored electronically so that, for example, doctors can refer back to your medical history (as can you). I'm not sure why COVID results would be unique in not being stored--and, in fact, seem like something that would be less sensitive than a lot of stored data.

And as per these records not being in the best interest of the person, knowledge of previous infection could be useful in diagnosis if, say, the person has long COVID and is unable to recite their medical history for some reason.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#43
During the height of COVID, I was exploring the API design of the top-selling COVID tests on Amazon. Several had wildly unsecured APIs—sequential patient IDs but the results endpoint assumed knowing the “secret” patient ID counted as auth. Or just completely open GraphQL implementations, no different than a password-less db…

For anyone considering DIYing a diagnostics program, don’t. But I’m biased (I’m the founder of a YC-backed diagnostics as a service co: https://spotdx.com)

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#44
post #32

Earlier quoted context omitted.

Why does it need to be logged and stored by a third party? I'd not have a problem with an employer offering daily on-site testing with no persistent logging for people who have to be on-site but for whatever reason can't be vaccinated, or if they're having outbreak problems in the area. If no one stored it, there would be nothing to get leaked when the eventuality of data breach happens. Storing it is not in the best…

The “instant” tests that can be done without a lab are not anywhere near as accurate as lab tests.

Lab test require visiting place where you meet infected people.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#45
post #24

Earlier quoted context omitted.

Medical records are typically stored electronically so that, for example, doctors can refer back to your medical history (as can you). I'm not sure why COVID results would be unique in not being stored--and, in fact, seem like something that would be less sensitive than a lot of stored data.

Problem is use of the word like "Typically ...". Start there.

Indeed, we seem to be OK with things being stored forever, bought and sold without oversight or consent, when they could've been on a local piece of paper or never written down at all.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#46
post #11

Earlier quoted context omitted.

[flagged]

Because the covid outrage industry has gotten boring. It used to be about how we were going to be forced to stay home forever, then it was about how we'd be forced to wear masks forever, and now that that stuff didn't come to pass it's fizzling out as the people who still have a chip on their shoulder need to find some passive aggressive way to be outraged and oppressed.

I’m not gonna forget how absolutely ludicrously long all that did last, and making it out to be “just two weeks” isn’t going to change anything.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#47
post #24

Earlier quoted context omitted.

Medical records are typically stored electronically so that, for example, doctors can refer back to your medical history (as can you). I'm not sure why COVID results would be unique in not being stored--and, in fact, seem like something that would be less sensitive than a lot of stored data.

And as per these records not being in the best interest of the person, knowledge of previous infection could be useful in diagnosis if, say, the person has long COVID and is unable to recite their medical history for some reason.

Admittedly, the results of COVID instant tests were not necessarily recorded anywhere--at least unless you made an appointment with your doctor after a positive result.

But I'm pretty sure that's not a reason to more or less uniquely exclude laboratory COVID tests from electronic record systems.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#48

Earlier quoted context omitted.

[flagged]

You'd prefer to just move on without mentioning or discussing the mass hysteria we all saw happen? People were literally locked in camps and we're supposed to just forget about it? I don't care if it takes 5, 10 or 20 years. Heads have to roll. We were lied to and ridiculed by the people that are supposed to protect us, and they're getting away with it. Your straw-man doesn't make it go away.

There wasn't enough "hysteria" (that is to say, rational precautions being taken) in my mind. Medical personnel are still so jaded from their experience that we get periodic articles about people quitting the field from burnout.

> People were literally locked in camps

China does this all the time for a variety of purposes. I really haven't heard about other countries doing this, have you?

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#49
post #24

Earlier quoted context omitted.

Why does it need to be logged and stored by a third party? I'd not have a problem with an employer offering daily on-site testing with no persistent logging for people who have to be on-site but for whatever reason can't be vaccinated, or if they're having outbreak problems in the area. If no one stored it, there would be nothing to get leaked when the eventuality of data breach happens. Storing it is not in the best…

Medical records are typically stored electronically so that, for example, doctors can refer back to your medical history (as can you). I'm not sure why COVID results would be unique in not being stored--and, in fact, seem like something that would be less sensitive than a lot of stored data.

I was commenting w.r.t. employer-mandated tests of some kind.

I don't know about other countries' situation, but here in the USA we have things like insurance companies at least considering the possibility of buying up data from things like 23andme and using that data to adjust your premiums.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#50
post #47

Earlier quoted context omitted.

And as per these records not being in the best interest of the person, knowledge of previous infection could be useful in diagnosis if, say, the person has long COVID and is unable to recite their medical history for some reason.

Admittedly, the results of COVID instant tests were not necessarily recorded anywhere--at least unless you made an appointment with your doctor after a positive result. But I'm pretty sure that's not a reason to more or less uniquely exclude laboratory COVID tests from electronic record systems.

I was commenting w.r.t. employer-mandated tests of some/any sort. Things you might have to do as part of your going-to-work daily routine.

During the pandemic, I had a few customers who would take temperature when you arrived on-site, and put it in the paper contractor/visitor log. If they'd wanted me to submit the data to some third party and actually associate it with my and/or my business's name, I'd have had a problem with that. It wouldn't matter to me what procedure I was being asked to submit to.

Post reply on HN