Healthcare startup Lyfebin exposed 1000 medical imaging files, such as X-rays, MRI scans, and ultrasounds.
The files were found stored in an unprotected Amazon Web Services (AWS) storage bucket, without a password, allowing anyone who knew the easy-to-guess web address access to the data.
The storage bucket contained more than 93,000 files many appeared to be duplicates containing medical scans.
Our additional inquiries, such as how long the bucket was exposed, went unanswered by Lyfebin.
The business will not indicate if it intended to notify customers of the security breach.
Source: https://techcrunch.com/2019/12/20/lyfebin-medical-imagees-exposed/
"id": "LYF2358523",
"linkid": "lyfebin",
"type": "Data Leak",
"date": "12/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"