How a user access bug in Ireland’s vaccination website exposed more than a million records

A vulnerability in the Irish Health Service Executive’s vaccination website allowed unauthorized access to patient records, which was not disclosed for two years.