Ohio Medical Alliance exposed a medical marijuana patient database...

[Brownie2019]

Content source

https://hackread.com/ssns-health-records-exposed-marijuana-patient-database/

Ohio Medical Alliance exposed a medical marijuana patient database containing 957,000 records, including SSNs, IDs, health files, and sensitive internal notes.
Cybersecurity researcher Jeremiah Fowler identified two unprotected, misconfigured databases containing nearly one million records linked to Ohio Medical Alliance LLC, a company better known under its brand name Ohio Marijuana Card.

Fowler, who reported the exposure to Website Planet, found that the databases were left open without encryption or password protection, allowing anyone with an internet connection to access names, Social Security numbers (SSN), dates of birth, home addresses, and high-resolution images of driver’s licenses.
The files also contained deeply personal medical information, such as intake forms, physician certifications, and evaluations related to conditions like Post-traumatic stress disorder (PTSD) and anxiety.

Full Story here:

Nearly 1M SSNs and Health Records Exposed in Marijuana Patient Database

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

hackread.com