Medical data of 33,000 BJC HealthCare patients exposed online for 8 months

The personal data of 33,420 patients of BJC HealthCare was exposed for eight months due to a misconfigured server, leaving the information easily accessible on the internet. The data included Social Security numbers, insurance cards, drivers licenses, and treatment information. Although there is no evidence of unauthorized access, BJC is offering affected patients one year of free credit monitoring and is reviewing its security policies to prevent future incidents. This incident highlights the importance of healthcare organizations securing their data properly.