Molina Healthcare.com Exposed Patient Records

Summary: Molina Healthcare, a Fortune 500 company ranked 201 in 2016, exposed patient medical claims on MolinaHealthcare.com without requiring any authentication, so that changing a single number in the claim URL (e.g., claimID=123456789) displayed other patients' records. The records included patient names, addresses, dates of birth, medical procedure codes and prescribed medications, and Molina said it fixed the issue, took its ePortal temporarily offline for additional security testing, and engaged Mandiant, while declining to say how many records were exposed.
Why it matters: The company would not say how many records were exposed, and the article notes it looks like potentially all of them - a count that determines the breach's reporting obligations and the scale of notification owed to patients.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026