Unprotected CVS database exposed sensitive customer searches - Help Net Security

Unprotected CVS database exposed sensitive customer searches - Help Net Security

Researchers have discovered an unprotected, exposed online database with over a billion records belonging to American healthcare company CVS Health.



The discovery, made by researcher Jeremiah Fowler and the WebsitePlanet research team, happened in March 2021 and the database was secured the next day, after CVS Health was notified and they contacted the (unnamed) third-party vendor in charge of securing the database.


“CVS Health acted fast and professionally to secure the data and a member of their Information Security Team contacted me the following day and confirmed my findings and that the data was indeed theirs. I was informed that this was a contractor or vendor who managed this dataset on behalf of CVS Health, but it was confidential as to who the vendor was,” Fowler said.


What type of data was accessible?


 



Support the originator by clicking the read the rest link below.