Reporting a security issue
If you think you have found a security problem in Pharmacy HQ, please tell us. Pharmacy HQ holds pharmacy and patient records, so we treat every report seriously.
How to report
Email security@pharmacyhq.com.au. Please include:
- what you found and where (the page, address or feature);
- the steps to show the problem;
- what you think the impact could be;
- how we can contact you.
If you are a pharmacy using Pharmacy HQ and you think your own account or your patients' records have been accessed by someone who should not have access, email security@pharmacyhq.com.au straight away and say so in the subject line.
While you look into it
- Use only your own account or a test account. Do not access, change or delete other people's data, and stop as soon as you see any patient or pharmacy information that is not yours.
- Do not run denial of service tests, send spam, or try to trick pharmacy staff or patients.
- Keep the details private until we have fixed the problem, and give us a reasonable time to do so.
What happens next
We will acknowledge your report, look into it, and keep you updated on what we find. We aim to reply within two business days.
We do not run a paid bug bounty program.
Other questions
For help using Pharmacy HQ, email support@pharmacyhq.com.au. For questions about personal information, email privacy@pharmacyhq.com.au.