TLDR InfoSec · ATTACKS & VULNERABILITIES

'UBER FOR NURSES' EXPOSES 86K+ MEDICAL RECORDS, PII IN OPEN S3 BUCKET FOR MONTHS

theregister.com4 min read

Summary from the TLDR InfoSec newsletter

Healthcare tech company ESHYFT exposed over 86,000 sensitive records in an unsecured AWS S3 bucket, including nurses' medical information, facial images, and ID documents. Despite being notified in January, the company took over a month to secure the 108.8 GB database.