2017 — a security flaw allowed any Molina patient to access…
Data compromised
Medical
Technical writeup
a security flaw allowed any Molina patient to access other patients’ medical claims by simply changing a single number in the URL. no authentication was required to access patient claims information online.
Root cause
Error/Misdelivery: Programming error
References
- http://www.esecurityplanet.com/network-security/molina-healthcare-security-flaw-makes-patient-records-available-online.html
- https://krebsonsecurity.com/2017/05/molinahealthcare-com-exposed-patient-records/
- http://www.healthcareitnews.com/news/breaches-molina-healthcares-show-why-you-cant-skimp-security