AMCAS Security Issue

[medic170]

---

Members do not see this ad.

I wanted to know if anyone else has had this happen. If so, I urge you to contact AAMC. I am very concerned about this and I wanted to let everybody know about it and see if others had it happen too. This has happened several times. Below is the email I sent to AAMC today, and it explains everything!

Dear AAMC:
I want to alert you to a problem and security vulnurability with your web site. There have been several times that I have been logged on to MCAT THX and when I navigate or refresh the page, somebody else's information and scores comes up. I had access to all their information.

Worse yet, the same thing happens on the AMCAS 2005 application site. Sometimes I hit refresh or navigate between pages when logged on to my own application, and I become suddenly logged in to somebody else's account. This is far worse, because when it happens, I have access to their entire application, including essays, addresses, social security numbers, transcripts, EVERYTHING. I have had this happen 5 times now and had access to 5 different people's AMCAS application! I immediatly log out when this happens, but I am very worried that somebody who is not as honest and moral as me could access my(or someone else's) account.

My application could be changed or compromised by someone, but worse yet, in this day and age of identity theft, someone could access my information and social security number. I am VERY concerned about this. I wanted to alert you to the problem and I would like to know what is being done to address this issue. I want to know that my information is safe and protected, and right now IT IS NOT!!. Please respond to this ASAP and let me know what is being done about this. Thank you very much.

 

[Kazema]

Thanks for letting us know. I'm definitely going to double check every line on my app before submitting it.

 

[PublicEnemy]

yes, this happened to me a few times the first couple days AMCAS was available. i posted a message about this earlier. i would log on and enter stuff but when the screen refreshed, a different aamc id# would show up and the info all different. when i logged back on, my info was changed cause the same thing must have happened to the other person. i wrote a nearly identical letter to AAMC and they said they just asked which aamc id#'s i was able to see and they said they would look into it, but they've told me nothing else. i double checked everything dozens of times from then on until i submitted. i haven't encountered any problems since those first couple days though. but im still pretty worried about the security aspect.