Alberta investigating privacy breach in COVID-19 QR code system
Posted Nov 26, 2021 7:21 am.
Last Updated Nov 26, 2021 8:33 am.
The Alberta government is investigating a potential privacy breach, two days after the updated proof-of-vaccination QR code system for travel was supposed to become accessible.
The province hit pause on its rollout after 12 people reported to Alberta Health’s support desk that they got the wrong vaccine record when they entered their information online.
A statement from the minister of health says you can still get the previous version of the QR code, which is required under Alberta’s Restrictions Exemption Program for things like sitting at a restaurant or attending a sporting event.
NEW:
The Alberta government says there was a possible privacy breach on the vaccination record site.
AH received 12 reports from people who got the wrong vaccine record information after attempting to update their QR code for travel.
An investigation is now underway. pic.twitter.com/t0COBlzIZw
— Jeff Slack (@Jeffslack660) November 26, 2021
However, the ability to upgrade to the code that’s good for travelling across the country and internationally is off the table until the issue can be resolved.
“Protecting Albertans’ personal information is always our top priority and I apologize for this potential breach,” Health Minister Jason Copping says in the statement.
“Alberta Health took immediate action by taking the website and the updated record down. I want to assure Albertans they will be kept informed once the investigation is complete and the updated record for travel will be available as soon as the technical issue is addressed.”
Related article: Alberta updates QR code vaccine record for domestic, international travel
The province says the only information that appears on these proof-of-vaccination records is a name, birthday, and COVID-19 vaccination information.
No further information would have been compromised, the government adds.
The province assures the QR code record is not connected to any other health or personal information, and the Office of the Information and Privacy Commissioner has been informed about the ongoing investigation into the breach.
