Transcription Service Leaked Medical Records
Summary: MEDantex, a Wichita, Kansas medical transcription firm, took down its customer web portal after KrebsOnSecurity found that the password-protected physician upload area was open to the Internet, along with administrative pages that let any visitor add or delete users and search patient records by physician or patient name. CEO Sreeram Pydah confirmed the company had recently rebuilt its servers after a WhiteRose ransomware infection, and an exposed directory named "/documents/userdoc" listed more than 2,300 physicians, with records dating back to 2007.
What's compelling: More than 2,300 physicians' patient records, stored as Word documents and raw audio files, sat behind no authentication at all, and a Google cache shows the portal was wide open on April 10, 2018. The rebuild that followed the ransomware infection is where the exposure was introduced, so the recovery step itself became the breach.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·