This whistleblower sounded like a dweeb even before i read to the bottom of the article where there is this update:
For clarity, the register of all our nurses, midwives and nursing practitioners is held within Dynamics 365 which is our system of record," the spinner continued. "This solution and the data held within it, is secure and well documented. It does not rely on any SQL database. The SQL database referenced by the whistleblower relates to our data warehouse which we are in the process of modernizing as previously shared."
Of course the statement that their Dynamics 365 "does not rely on any SQL database" is highly unlikely, imo. Dynamics 365 is the branding of Microsoft's suite of CRM/ERP/accounting big enterprise software and while i'd never worked with it (or heard of it, tbh) of COURSE it's backed by SQL Server (what ELSE would it be backed by ? this is primarily what "SQL databases" have been used for as long as they've existed). As evidence here's an article about the new-in-2021 feature that allows you to connect to said database: https://dynamics-chronicles.co... (in a read only manner)
All of these people :
1) re the whistleblower: like you guys and others have said, "the schema is undocumented and it's lacking constraints" is more a "yeah, and there's a pothole in the parking lot, and unrest in the Middle East, and also it's a weekday" sort of thing than "let's run to the press and the government hotline" thing.
2) re the whistleblower part 2: the guy seems confused about their data warehouse vs their OLTP system (which , if in fact is Dynamics 365 they don't have control of the actual schema or constraints at the DB level)
3) but then the retort is also technically just wrong.
(ofc now that i've said this someone will come out and correct me and point out that Dynamics 365 totally doesn't work that way. and then i'll have to add myself to the list )