You are reading a single comment by @eskay and its replies. Click here to read the full conversation.
  • Since you mention NHS Teams... I was gobsmacked last week to discover my brother, an NHS physio, can login to his NHS account and see all kinds of confidential patient information with only a username and password. WTF?

  • But you can get into a lot of bother if you look up patient data that you are not legitimately allowed to within the remit of your role.

  • I'm not worried about my brother but someone getting his password, perhaps some sort of social engineering attack, and then doing naughty things.

About

Avatar for eskay @eskay started