Health Ministry Investigates Security Flaw in Medical Records App

Thailand's Health Ministry launched an investigation into security breaches affecting the 'Mor Prom' mobile application after receiving more than 400 complaints from users claiming their medical records were accessed and used without permission. Health Minister Pattana Prom-Pattana revealed the issue on July 27, explaining that some users discovered hospital visits recorded in their Mor Prom history that they never actually attended, including cases where they denied ever seeing doctors or receiving medication at those facilities.

The minister clarified that Mor Prom is a data aggregation platform designed to display health records from various healthcare providers rather than a direct service provider itself. Launched during the COVID-19 pandemic, the app consolidates medical information from hospitals, health clinics, and other healthcare units to give citizens access to their own health data. The app has been expanded to allow appointment booking for medical consultations, vaccinations, and hospital services.

Pattana acknowledged possible sources of discrepancies, including data entry mistakes, misunderstandings, fraudulent claims, or cases where hospitals conducted off-site examinations that patients may not have realized. He emphasized that the app itself functions normally and recommended citizens report any inaccuracies directly through the application, allowing the backend system to investigate further while removing incorrect records from public view. The ministry expects to resolve the matter within two weeks and has invited all healthcare providers to connect their data systems with Mor Prom to enhance transparency and build comprehensive health databases for the nation.