Highly Sensitive Medical Cannabis Patient Data Exposed by Unsecured Database
Briefly

A recent data breach revealed a publicly accessible database containing sensitive personal information of patients applying for medical marijuana cards in Ohio. This 323GB database included close to a million records, consisting of medical records, Social Security numbers, email addresses, and identification documents. Security researcher Jeremiah Fowler suspected the data belonged to Ohio Medical Alliance LLC, known as Ohio Marijuana Card. Following Fowler's notification, the database was secured, but the company has not responded to inquiries about the incident, although its president acknowledged the situation and indicated an investigation was underway.
This database exposed sensitive personal information for nearly a million individuals, including medical records and Social Security numbers, highlighting serious data privacy concerns.
The exposed data contains not only basic identification but also detailed medical evaluations and health information, raising significant questions about data security in the cannabis industry.
Read at WIRED
[
|
]