Highly Sensitive Medical Cannabis Patient Data Exposed by Unsecured Database

As legal marijuana Has expanded around the United States for both recreational and treatment use, have collected companies Data troves About customer and their transactions. Those who applied for a medical marijuana card had to share personal health data, especially to qualify. For some of the Ohio patients who use treatment weeds, the recent data exposure can affect their sensitive information.

Jeremia Fouler A universal accessible database has been found In mid -July, those who have medical records, mental health evaluation, physician reports and ID images that have images of driver’s licenses for people seeking treatment marijuana card. 323-GB Trove was stored near a million records with social security numbers, email address, physical address, date of birth and medical data-organized by all names.

Based on information as described by specific employees and business partners, Fawler suspected that the Ohio-based company Ohio Medical Alliance LLC was known as the Ohio Marizuana Card. Pholler contacted the company on July 14; The next day when he tested the database, it was protected and no longer publicly accessible online. Foller did not receive any response to his submission.

Ohio Medical Alliance did not answer wired questions about foller search. Although at one point, the president of the organization, Cassandra Brooks, wrote in an email: “I need time to investigate this alleged incident. We take data protection very seriously and investigate this.”

“The physicians were reports that would say what the underlying problem would say – it was anxiety, cancer, HIV or anything. In some cases, applicants would submit their own medical record as proof of their qualifications”, told Foller Ward. “I have seen a lot of state identity documents from everywhere. And I have even seen the criminal release cards that are basically ID for people that just came out of prison that they submitted as proof of identity for getting medical marijuana cards.”

The foller says that most of the database files were image formats like PDFS, JPG and PNGS. A CSV Plaintext Document called “Staff Comment” appeared as internal communication, appointment history, notes about clients and an application status export. This file also contains 200,000 email addresses of Ohio Medical Alliance employees, business associates and customers.

The databases that have been incorrectly configured and unknowingly published on the open internet is a Common Problem Online In spite of attempts to raise awareness about the impact of the wrong and its privacy.