Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript

Re:Tell HN: Medvi (telehealth) hardcodes 999 patient emails ... by pants2 on Sunday April 26, 2026 @02:04PM (#47912399)

So did you disclose this responsibly? Posting about it publicly first is asking for that sensitive data to be leaked. Might as well hack and repost that PII yourself.

[ Parent | on HN ]

Re:Tell HN: Medvi (telehealth) hardcodes 999 patient emails ... by g48ywsJk6w48 on Sunday April 26, 2026 @03:04PM (#47912919)

This is not a data leakage. They deliberately included 999 of their customers' email addresses in publicly accessible JavaScript code in order to test certain features on them.

[ Parent | on HN ]

Re:Tell HN: Medvi (telehealth) hardcodes 999 patient emails ... by pants2 on Sunday April 26, 2026 @08:18PM (#47916311)

Certainly that wasn't intentional to broadcast to the public? Sounds like a textbook data leak.

> A data leak is the unauthorized, often unintentional exposure of sensitive, confidential, or personal information to an external party, usually resulting from weak infrastructure, human error, or system errors.

[ Parent | on HN ]