Eugene IT Services2020-11-17T12:30:33-08:00
Jeremiah Fowler, a researcher with Security Discovery recently found an unprotected Elasticsearch database owned by a company called SkyMed on the internet. According to his findings, the database was configured such that it was open and visible to any browser. This allows anyone who stumbles across it to edit, download, or even delete data without administrative credentials.
The database contained a total of 136,995 patient records with histories going back thirty years in some cases.
It also included a variety of...