[qtplatypus]

The accessed names, addresses and medical status. These are all PII and medical information has even higher level of privacy. You want people to use medical services in confidential, it is safer for everyone that if someone suspects that they have an infectious disease that they have the appropriate medical help.

This is why Drs records and the like are very difficult for people to get, even law enforcement.

[arcticbull]

I get that they shouldn’t have had access to this information. I just can’t for the life of me figure out what harm they could have done with it.

I suspect 150 queries a day is some script, maybe for a dashboard.