NHS 24 said that “all data is anonymised”
Bollocks. If you're logged into Google or Facebook (some people do, I hear...) and browse that website, they've just found out what medical/insurance ads to target you with.
There are two possibilities, either lying or incompetence, which is it this time?