Public Option: How Medical Records and Patient-Doctor Recordings Were Exposed

Personal and medical details for almost 3,000 individuals handled by the US firm Medcall Healthcare Advisors was exposed after the company left its Amazon S3 storage bucket unsecured. The exposed data included recordings of calls between patients, Medcall staff and clinicians, as well as sources of workers compensation claims by staff at 181 business, said cyber security firm UpGuard, which discovered the leak. The permissions of the storage bucket were set as “Everyone – Full Control”.