TLDR InfoSec · ATTACKS & VULNERABILITIES
'UBER FOR NURSES' EXPOSES 86K+ MEDICAL RECORDS, PII IN OPEN S3 BUCKET FOR MONTHS
Summary from the TLDR InfoSec newsletter
Healthcare tech company ESHYFT exposed over 86,000 sensitive records in an unsecured AWS S3 bucket, including nurses' medical information, facial images, and ID documents. Despite being notified in January, the company took over a month to secure the 108.8 GB database.