Bug in Irish Government Website Exposed COVID-19 Vaccination Records; Disclosure Comes After Two Years

The vulnerability in the portal, built on Salesforce's health cloud, allowed any member of the public registering with the portal to access the vaccination records of other registered users, including personal details and internal HSE documents.