A dental practice software company has fixed a security bug that exposed patients' medical records. The vulnerability was discovered by a patient who reported difficulty notifying the vendor about the issue.
The bug allowed unauthorized access to sensitive patient data stored within the dental software platform. While the company has now patched the vulnerability, the incident highlights challenges in responsible disclosure practices.
The patient who discovered the flaw encountered obstacles when attempting to report it to the software maker, raising questions about the company's security reporting procedures. The specifics of how many patients were affected and the duration of the exposure remain unclear.
Dental practices rely on software systems to store confidential patient information including medical histories, treatment plans, and personal details. Security breaches in such systems pose significant risks to patient privacy and can trigger regulatory scrutiny.
The company has not disclosed additional details about the bug's technical nature or whether unauthorized parties accessed patient data before the fix was deployed. Patients affected by the exposure should monitor their personal information for potential misuse.
Illinois county prosecutors secretly provided personal information about criminal defendants to federal immigration agents without warrants, public disclosure, or legislative approval.
Law enforcement from 22 countries arrested 58 individuals and identified 263 suspects in a coordinated crackdown on cybercrime networks run by African crime groups.
The Los Angeles County Museum of Art disclosed a data breach from last year that compromised customer and employee information, including social security numbers and medical records.
A phishing-as-a-service platform called AnonyMousKIT uses voice AI agents to extract passcodes from stolen Apple devices and bypass Activation Lock security features.