Someone once took a photo in a hospital waiting room. There was a screen in the photo with a browser window that listed the queue of patients waiting to be seen

Someone once took a photo in a hospital waiting room. There was a screen in the photo with a browser window that listed the queue of patients waiting to be seen (first name + last initial). I zoomed into the photo, typed the URL in my home machine and sure enough, the list of patients actively waiting to be seen loaded up. To make matters worse, incrementing a number in the URL cycled through different hospital waiting rooms. I emailed the vendor who build the tool about the issue and they responded letting me know that system worked as it was designed, and that no HIPPA violations existed since there was no full last name. I meant to make a bigger deal about this, but then got busy.