The private medical details of 29 patients at Unichem Petone were left exposed online after the Wellington pharmacy switched to a new website.
Full names, contact details and repeat prescriptions were visible to anyone who searched. The prescriptions covered psychiatric, weight-loss and erectile dysfunction medications, alongside details parents had provided for their children.
Owner Joseph Tsou said he was “shocked” and blamed a “system access/configuration error” on the new site, insisting it was not a database breach. Stuff alerted him to the leak on Monday, and the site has since been taken offline. The site was built on Base44, an AI vibe coding platform, which one social media user spotted in the page’s source code. Read more at Stuff, RNZ and Lachlan on X.
This story has been republished with permission from RCR Bites. For news like this direct and free to your Inbox every day, go to biteme.news to sign up for RCR Bites.
Image credit: Towfiqu Barbhuiya
