Dr. Lal PathLabs, one of India's largest lab testing companies, left a massive cache of patient data on a public server for months.
The company was storing hundreds of large spreadsheets packed with sensitive patient data in a storage bucket, without a password, allowing anyone to access the data inside.
Australia-based security expert Sami Toivonen found the exposed data and reported it to Dr. Lal PathLabs
The company quickly shut down access to the bucket but did not reply, It’s not known how long the bucket was exposed.
Source: https://techcrunch.com/2020/10/08/dr-lal-pathlabs-exposed-patient-lab-data/
"id": "DRL82819523",
"linkid": "dr-lal-pathlabs",
"type": "Breach",
"date": "10/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"