A security flaw on a COVID-19 website run by the state government in West Bengal, India, potentially exposed the patient records of a majority of the 8.5 million individuals in the database, TechCrunch reports. A bug on the government's website allowed for patient identification numbers to be decoded and manipulated to provide access to any individual's results. Names, ages, genders and postal addresses were included in each file, along with the test results. The database was taken offline in February after the flaw was identified.