A Canadian healthcare giant, Care1, exposed a database containing millions of sensitive records.
The database, discovered by security researcher Jeremiah Fowler, contained patient Personally Identifiable Information (PII), eye exams, doctor's comments, and images of exam results.
The database also included spreadsheets with patient information like home addresses and Personal Health Numbers (PHN).
Care1 locked down the database after being notified, but it's uncertain if any unauthorized access occurred prior to the discovery.