Patient data access using 4 URLS only entering the DNI, lacks security measures.

Resolution is issued, directly as they have not filed any allegations against the IIA. Security measures are imputed, an authentication mechanism due to access to patient data through several hospital URLs only by introducing the DNI without any other access control measures. They claimed that they had erroneously published a 'test environment' and that they have already unpublished these URLs.