Laura Osman reports: Thousands of potentially personal and sensitive files belonging to an Ottawa community housing agency were unwittingly released to Ontario’s police watchdog in 2016 and have been sitting in court as an unsealed exhibit for weeks. News of the breach was revealed this week during the manslaughter trial of Const. Daniel Montsion, who…
Category: Exposure
Indian govt agency left details of millions of pregnant women exposed online
Catalin Cimpanu reports: A database managed by an Indian government healthcare agency was left connected to the Internet without a password, where it exposed more than 12.5 million medical records for pregnant women, ZDNet has learned. Records go as far back as five years, to 2014, and include detailed medical information for women who underwent…
MO: Burrell Behavioral Health notified more than 67,000 patients whose ePHI were exposed by business associate
On March 29, Burrell Behavioral Health published a news release about an unnamed business associate accidentally exposing ePHI of more than 67,000 patients back in August, 2018. Burrell’s notification, reproduced below, does not indicate when the problem was first detected nor how they learned of it, but it was they who notified their business associate…
New Shodan Tool Warns Organizations of Their Internet-Exposed Devices
Kelly Jackson Higgins reports: Famed Internet search engine Shodan this week rolled out a service that helps solve the underlying problem its tool exposes: The new Shodan Monitor alerts organizations about their devices left exposed on the public Internet. […] Matherly says setting up Shodan Monitor – which is free to all paying Shodan members – takes…
Rela, a Chinese lesbian dating app, exposed 5 million user profiles
Zack Whittaker reports: Rela (热拉), a popular dating app for gay and queer women, has exposed millions of user profiles and private data because a server wasn’t protected with a password. Rela disappeared from app stores in May 2017 after it was reportedly shut down by Chinese regulators, though the government never confirmed it took…
Voya Financial Advisors exposes more sensitive adviser information on its website
Less than six months after Voya made headlines by agreeing to pay $1 million to settle SEC charges stemming from a 2016 breach, they have been back in the news after two incidents — one embarrassing and one concerning. Bruce Kelly reports: Weeks after a computer glitch risked exposing the Social Security numbers of its…