It is worse than what this brief summary indicates – read the linked article
If you got a Covid-19 test at Walgreens, your personal data — including your name, date of birth, gender identity, phone number, address, and email — was left on the open web for potentially anyone to see and for the multiple ad trackers on Walgreens’ site to collect. In some cases, even the results of these tests could be gleaned from that data.
The data exposure potentially affects millions of people who used — or continue to use — Walgreens’ Covid-19 testing services over the course of the pandemic.
Another system error is they had me go through an online process to enter my medical history – as I have numerous allergies, this took a bit of time. However, when I arrived at Walgreen’s they had me fill in ALL OF THE DATA again on a paper form, which even asked slightly different questions. This is a sign of failed information systems program at Walgreens.
Walgreens’ software developers made an egregious privacy error, so egregious the entire team should be fired … While I have a BS in computer science and MS in software engineering, security is not my specialty area. But even I knew not to do what they had done here. This incompetence.