A dental practice software company has fixed a security bug that exposed patients' medical records. The vulnerability was discovered by a patient who reported difficulty notifying the vendor about the issue.
The bug allowed unauthorized access to sensitive patient data stored within the dental software platform. While the company has now patched the vulnerability, the incident highlights challenges in responsible disclosure practices.
The patient who discovered the flaw encountered obstacles when attempting to report it to the software maker, raising questions about the company's security reporting procedures. The specifics of how many patients were affected and the duration of the exposure remain unclear.
Dental practices rely on software systems to store confidential patient information including medical histories, treatment plans, and personal details. Security breaches in such systems pose significant risks to patient privacy and can trigger regulatory scrutiny.
The company has not disclosed additional details about the bug's technical nature or whether unauthorized parties accessed patient data before the fix was deployed. Patients affected by the exposure should monitor their personal information for potential misuse.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.
Fraudsters are exploiting Microsoft Teams and similar enterprise chat apps to deceive Chinese users into sending large sums of money. The trend has sparked a wave of complaints across the region.