The article goes into a bit more depth; since very little information is required to get a copy of your QR code, they likely found or guessed the required infor

The article goes into a bit more depth; since very little information is required to get a copy of your QR code, they likely found or guessed the required information to simply fetch the QR code for the politicians the way they would download their own. Sounds like if you have someone's name, birthdate, and social insurance number (like an SSN but meant to be more secret), you can get a QR code that has someone's name, birthdate, and vaccination status. In other words, if you have two pieces of commonly available information, and one piece of secret information, you can get two pieces of commonly available information and one piece of information that you're going to have to share with others anyway. From the article: > Quebecers shouldn’t worry much about their codes being stolen, he said, because the QR codes contain less personal data than the information needed to steal them. With someone's name, birthdate, and SIN, you can likely get access to a lot more private data than this QR code system provides you.