Expert Commentary: Thousands Of U.S. Lab Results And Medical Records Spilled Online After A Security Lapse

NTreatment, a technology company that manages electronic health and patient records for doctors and psychiatrists, left thousands of sensitive health records exposed to the internet because one of its cloud servers wasn’t protected with a password. The cloud storage server was hosted on Microsoft Azure and contained 109,000 files, a large portion of which contained lab test results from third-party providers like LabCorp, medical records, doctor’s notes, insurance claims, and other sensitive health data for patients across the U.S.

Experts Comments

December 03, 2020
Pravin Rasiah
VP of Product
CloudSphere
With the responsibility of collecting and storing extremely personal patient information, it’s imperative that healthcare organizations have proper security measures in place to prevent data leaks and breaches. A server left exposed without a password can endanger patient information and damage a brand's reputation. To ensure patient records remain secure, organizations should invest in a cloud management platform with the ability to provide real-time updates within the cloud landscape. With.....Read More
With the responsibility of collecting and storing extremely personal patient information, it’s imperative that healthcare organizations have proper security measures in place to prevent data leaks and breaches. A server left exposed without a password can endanger patient information and damage a brand's reputation. To ensure patient records remain secure, organizations should invest in a cloud management platform with the ability to provide real-time updates within the cloud landscape. With proper visibility into complex deployments, businesses can control security risks and ensure misconfigurations are remediated before they’ve been exploited.  Read Less

Submit Your Expert Comments

What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.
Be part of our growing Information Security Expert Community (1000+), please register here.

Write Your Expert Comments *
Your Registered Email *
Notification Email (If different from your registered email)
* By using this form you agree with the storage and handling of your data by this web site.