Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Kind of unrelated but: my father tried gifting my brother a subscription but entered the wrong email. Money and subscription are both gone — UI just doesn't have the option of amending, cancelling or resending it.

For the last couple weeks, dad's gone into a rabbit hole of trying to reach support——any kind of (useful) support. No dice. Thankfully it's just a few dollars gone into the void.

If only they had the tools to build a better experience... :-)

 help



I know what to do!

I have an email address that old people often often assume is their address, so I often get confirmation emails for medical procedures that under HIPAA should not be sent unless unless the address has been verified.

The easiest way to stop them is to email the company any let them know they just leaked personal health information and that they should verify addresses. That gets things fixed real quick.

Well, Anthropic touts itself as HIPAA compliant, so if you can contact Anthropic's legal department, let them know that not verifying email addresses could lead to a HIPAA violation. In the overwhelming likelihood that they've made it difficult to contact their legal department, you can file a HIPAA complaint with the NHS (https://www.hhs.gov/hipaa/filing-a-complaint/index.html) and let them know that Anthropic claims to be HIPAA compliant but does not verify the ownership of email addresses before assigning them to a client's account, which may contain personal health information, which could be leaked en masse.

Another option is to file a charge back with the credit card company, and let them know that due to Anthropic's web page not complying with the ADA's WCAG, you are unable to access your account.


You can file a report through HackerOne: https://hackerone.com/anthropic-vdp?type=team file it as a bug (which it is)

Why not a credit card charge back? That’s what it’s for (assuming he paid with one)

Among other reasons (good citizen, not getting permabanned…), chargebacks aren't really a thing in Europe — they often require a police report, etc. Amex being the exception, but this wasn't.

Because I assume they want to be able to use it, not be banned forever.

I don’t know if I’d want to do business with a company after being treated like that.

Nobody develops past the “MVP” or addresses non-happy-paths anymore. It’s just “what do we think most users will do?” that gets built, and then everything else is a thrown exception.

Wild that it gets billed before it is accepted.



Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: