Home GDPR #Privacy: Freedom Healthcare Staffing exposes almost a million records
GDPR - October 9, 2019

#Privacy: Freedom Healthcare Staffing exposes almost a million records

A non-password protected database containing 957,000 records from Freedom Healthcare Staffing in Aurora, Colorado has been found. 

Security researcher, Jeremiah Fowler discovered the database on September 16 – to which it contained intimate details of employees, internal notes, possible internal email communications, job seeker and recruiter data, IP addresses, ports and pathways. 

“In a sampling of the documents I read for verification purposes, I saw failed drug tests (without prescriptions for those drugs), a nurse being accused of taking a patient’s painkillers, complaints about a hospital’s illegal interference in nurses trying to unionize, and many more complicated situations,” Fowler wrote. 

Fowler added that in one document a manager had cited a news article of a nurse who had been arrested, to which the manager then instructed an employee to check if that nurse’s name was in their system or if the nurse had ever worked for Freedom Healthcare Staffing. 

“These notes were so detailed that several records I saw even contained Social Security Numbers in plain text.”

Fowler notified the company and soon after the database was secured. 

It remains unclear as to if Freedom Healthcare Staffing has informed their employers, partners or the authorities about the data exposure. Additionally, it remains unknown as to how long the data was exposed for, and who may have gained access to the database – which is rather worrying, given the sensitive nature of the information discovered. 

The post #Privacy: Freedom Healthcare Staffing exposes almost a million records appeared first on PrivSec Report.

Source link

Leave a Reply

Your email address will not be published. Required fields are marked *

Check Also

Data Breach Report in Capitol One Litigation Not Privileged

On May 26, the District Court found in the In Re: Capital One Consumer Data…