Medical Procedure: How a Misconfigured Storage Bucket Exposed Medical Data

UpGuard’s Data Breach Research Team discovered a leak of nearly 14,000 documents from Medico, containing financial, medical and personal data. The files included bank account details, social security numbers and explanations of insurance benefits. A quick response from Medico ensured the leak from Amazon’s S3 bucket storage service was quickly closed. The law firm said HIPAA’s data protection standard, which is supposed to keep healthcare firms accountable, often failed due to poor operational processes that don’t factor in the risk of data exposure.