Get the latest tech news
Highly Sensitive Medical Cannabis Patient Data Exposed by Unsecured Database
Nearly a million records, which appear to be linked to a medical cannabis card company in Ohio, included Social Security numbers, government IDs, health conditions, and more.
As legal cannabis has expanded around the United States for both recreational and medical use, companies have amassed troves of data about customers and their transactions. One CSV plaintext document called “staff comments” appeared to be an export of internal communications, appointment histories, notes about clients, and application status. Databases that are misconfigured and have inadvertently been left publicly exposed on the open internet are a common problem online in spite of efforts to raise awareness about the mistake and its privacy implications.
Or read this on Wired