Latest in Gear

Image credit:

A public database exposed medical records of 150,000 rehab patients

It included five million rows of data from an addiction recovery center in Pennsylvania.

Sponsored Links

ipopba via Getty Images

Nearly 150,000 patients who sought treatment at an addiction recovery facility in Pennsylvania had their medical records exposed online. Through the public search engine Shodan, independent researcher Justin Paine found an ElasticSearch database with nearly five million rows of data. It appeared to include personally identifiable information (PII) of patients who were treated at Steps to Recovery between mid 2016 and late 2018.

Paine notified ElasticSearch, which contacted the owner of the database. The information is no longer publicly accessible, but in a blog post, Paine said to the best of his knowledge, Steps to Recovery has not reached out to the patients. While 150,000 people is a relatively small data leak by today's standards, exposing health records, especially those regarding addiction and with PII, is a serious mishap.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

Roku is giving away 30 days of premium video

Roku is giving away 30 days of premium video

View
NASA warns Moon base plans might slip by a year

NASA warns Moon base plans might slip by a year

View
Lab-in-a-box test can detect COVID-19 in 5 minutes

Lab-in-a-box test can detect COVID-19 in 5 minutes

View
SpaceX launches its original Dragon capsule for the last time

SpaceX launches its original Dragon capsule for the last time

View
Facebook's experimental Stories feature lets users cross-post to Instagram

Facebook's experimental Stories feature lets users cross-post to Instagram

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr