EYECARE & HEALTHTECH COMPANY EXPOSED ALMOST 5 MILLION RECORDS

Summary from the TLDR InfoSec newsletter

Jeremiah Fowler discovered an unencrypted, non-password protected database containing 4.8 million records belonging to AI optometry software company Care1. The database contained eye exams in PDF format which included patient PII, doctor's comments, and images of the exam results. The database also included spreadsheets that contained patient addresses, personal health numbers, and other PHI. Care1 removed the database after it was notified of the exposure.