Website Flaw Let True Health Diagnostics Users View All Medical Records

Summary: True Health Diagnostics, a Frisco, Texas lab company, let logged-in users view other patients' full medical reports by changing a single digit in the PDF link attached to their own record. KrebsOnSecurity verified the flaw with consultant Troy Mursch, alerted the company, and True Health disabled the patient portal within minutes of the call and said over the weekend it had found and fixed the cause.
Key Takeaway: Mursch's comparison of record numbers from results two years apart suggests at least two million records may have been exposed, and the company said it was still investigating how long the vulnerability existed.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026