An IT specialist has found that around 10,000 doctors' internet contact information was left vulnerable by the US healthcare company Health Stream.
Ten days earlier, Wethern informed Health Stream of his discovery, stating that the data were hosted on one of the websites that had been taken down.
Shortly after Wethern revealed the data leak, the website containing the medics' records was taken down, but the compromised material is still accessible through various internet caches.
Threat actors may utilise compromised data to initiate a spear phishing attack on Health Stream physicians.
Source: https://securityaffairs.com/71669/data-breach/health-stream-data-leak.html
"id": "HEA337251223",
"linkid": "healthstream",
"type": "Data Leak",
"date": "04/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"