Medical Marijuana Provider Breach Leaks Nearly 1 Million Records 

Recently, cybersecurity researcher Jeremiah Fowler discovered and reported to WebsitePlanet an unprotected and unencrypted database belonging to Ohio Medical Alliance LLC, a U.S.-based organization that assists individuals in obtaining physician-certified medical marijuana cards.

What happened:

The exposed data was accessible to anyone with an internet connection and included personally identifiable information (PII) such as names, dates of birth, Social Security numbers, physical addresses, and identification documents like driver’s licenses. It also held private health records, intake and evaluation forms, and medical release documents, many with sensitive medical and financial information.

Why it matters:

This type of exposure poses serious privacy and security risks, including identity theft, medical fraud, and targeted phishing or social engineering attacks.

You can find the full report here: https://www.websiteplanet.com/news/ohio-medical-alliance-breach-report/

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading