Get the latest tech news

'Uber for nurses' exposes 86K+ medical records, PII via open S3 bucket


Learn about the critical database vulnerability reported by cybersecurity expert Jeremiah Fowler concerning ESHYFT's extensive network of healthcare professionals and facilities across 29 states.

The platform is available in following U.S. states: AL, AZ, AR, CA, CT, DE, FL, GA, IL, IN, IA, KS, KY, MD, MI, MN, MO, NE, NJ, OH, PA, RI, SC, TN, VT, VA, WA, WI, and WV. Any exposure of Personally Identifiable Information (PII), salary details, and work history of nursing professionals could result in significant potential risks and vulnerabilities — both for the affected individuals and the healthcare facilities that employ them. Scans of identification documents (such as driver’s licenses or Social Security cards) when combined with addresses and other contact details could hypothetically provide a gateway for cybercriminals to commit identity theft or financial fraud in the victims’ names.

Get the Android app

Or read this on Hacker News

Read more on:

Photo of Uber

Uber

Photo of medical records

medical records

Photo of PII

PII

Related news:

News photo

Uber terminates Foodpanda Taiwan acquisition, citing regulatory hurdles

News photo

'Uber for nurses' exposes 86K+ medical records, PII in open S3 bucket for months

News photo

H3: For indexing geographies into a hexagonal grid, by Uber