Unsecured database exposes 1 billion CVS Health records: 5 things to know

Listen
Text
  • Small
  • Medium
  • Large

A public database exposed more than 1 billion CVS Health records, according to a June 16 report by ABC News.

Four details:

  1. The unsecured data was discovered by cybersecurity researcher Jeremiah Fowler in late March. He swiftly alerted the company of the breach.

  2. CVS said the database was hosted by a third-party vendor. CVS will continue to utilize the vendor and is working toward preventing a recurrence, according to a news statement obtained by ABC News.

  3. Breach records did not include patient data, but Mr. Fowler said some of the information revealed in the searches could have been linked to someone's identity.

  4. "Some search entries included email addresses and should be a wake-up call for companies to ensure their data security is solid," he said. "There were certain times where individuals put their own email addresses into the search bar and then that correlated with a visitor ID and user ID, and then usually it showed what they searched for. So, hypothetically, you could have connected those three and figured it out."
 

Copyright © 2021 Becker's Healthcare. All Rights Reserved. Privacy Policy. Cookie Policy. Linking and Reprinting Policy.

 

Featured Whitepapers

Featured Webinars