Med­i­cal pot data­base taken off­line fol­low­ing data breach

The Washington Times Daily - - NATION - — An­drew Blake

Ne­vada took its med­i­cal mar­i­juana pro­gram data­base off the in­ter­net this week af­ter the So­cial Se­cu­rity num­bers and other sen­si­tive in­for­ma­tion on thou­sands of dis­pen­sary ap­pli­cants were leaked on­line in­ad­ver­tently.

A vul­ner­a­bil­ity af­fect­ing a web por­tal used by the state’s med­i­cal weed pro­gram re­sulted in more than 11,700 dis­pen­sary ap­pli­ca­tions be­ing pub­licly ac­ces­si­ble be­fore the data­base was dis­abled this week, se­cu­rity re­searcher Justin Schafer said Wed­nes­day.

Mr. Schafer said he dis­cov­ered the bug af­ter a sim­ple Google search Tues­day re­sulted in him stum­bling upon a trove of un­se­cured data main­tained by the state’s Med­i­cal Mar­i­juana Pro­gram.

Each of the more than 11,700 ex­posed files con­tains the names, phone num­bers, home ad­dresses, birth dates, driver’s li­cense num­bers and com­plete So­cial Se­cu­rity num­bers of mar­i­juana dis­pen­sary ap­pli­cants, ac­cord­ing to the Daily Dot, a tech web­site that con­firmed the re­searcher’s dis­cov­ery this week upon recre­at­ing his Google search.

Newspapers in English

Newspapers from USA

© PressReader. All rights reserved.