BioTrackTHC Locations/License Data Leaks

When it was discovered that BioTrackTHC was on the way out in Washington many of you heard WeedTraQR declare: “it'll get worse before it gets better”.

Currently, there is some serious data control issues we're observing in the BioTrackTHC system. It's all centered around the Location or License number. In Washington State these are six digit numbers assigned to every location of a business. Licenses are related to a UBI – the Washington State Universal Business Identifier. And Licenses can be bought and sold. So, over time a License could belong to more than one UBI, it's relationship changes. And this starts the problems.

When the licenses change ownership; some data must be updated in the core WSLCB system operated by BioTrackTHC. The licensees communicate with the WSLCB, and they in-turn update some of their own data systems, then request that BioTrackTHC update the tracability database.

Here's where it get's really messed up. And this point Plant and Inventory data becomes crossed between businesses.

One Licensee (“D”) sold their license to another business (“S”). Then suddenly D is generating items with identifiers from S's unique sequence. Then when D shipped those items, and had to do a return cause of this odd setup the actual items disappeared from D's system and became new phantom inventory in S's data. Some kind of business/license/location corruption was clearly happening there.

Another business (“GG”) purchased a Processor only type of license from a producer/processor (“GC”). Then after purchase of this license, with a single location GO would see plants, in cultivation from the data belonging to “GC”. Plant data leaking from GC producer/processor to “GG” a processor only. A the time GG has only one location but sees Plants and Inventory that are from the previous location. And the Unique Identifers are all confused, some in the GG account using the GC UBI; and some in the GC account using the GG UBI.

Anyone moving locations or switching licenses needs to be aware that their data could get completely messed up, or crossed into another account or have some other pretty severe issues in a system that's supposed to provide “integrity”.

Both the WSLCB and BioTrack have known about this for at least two weeks and have yet to fix the issues. It's simply a symptom; BioTrackTHC is on their way out and have no motivation to fix their bugs here anymore. It's a common software sales practice that an incumbent vendor plays “hard to get” as the contract comes to a close. Both parties are handling this situation poorly and creating additional workload for licensed operators and their technology providers.