Beaumont closes programming vulnerability that allowed people to “queue” to get vaccinated

The Beaumont Health System IT team detected and shut down unusual activities related to online vaccination programming against COVID-19 on Saturday, the hospital announced Sunday.

TO READ: Some Michiganders are preparing the COVID vaccine ahead of those who need it

The unusual activity went to Beaumont’s Epic electronic medical record system. The Beaumont team determined that a user took advantage of a vulnerability in the Epic planning tool and publicly shared an unauthorized planning route that allowed 2,700 people to “line up” and sign up for a vaccine appointment. not authorized.

Beaumont cancels all appointments using the unauthorized path.

Announcements

Beaumont notified Epic’s national corporate office so it could communicate with other health systems to prevent this from happening elsewhere.

Beaumont said no one’s personal data or hospital records were committed to the vulnerability. The path simply allowed users to schedule an unauthorized appointment that circumvented Michigan’s current mandates.

“These citations violate the ethical distribution framework that Beaumont created based on Michigan State Mandatory Vaccine Guidelines. We regret that 2,700 people in our community have been victims of this unfortunate incident,” Hans said. Keil, senior vice president and chief information officer of Beaumont Health. “We remain committed to vaccinating as many people as possible to meet state guidelines. We also report the problem to the Michigan Hospital Association and other Michigan health systems. ”

TO READ: COVID-19 Vaccines Against Michigan: How to Find Appointments, Phase Information