A Mumbai-based medical lab accidentally posted the names, dates of birth and other medical information of 43,000 patients online, some of whom were tested for HIV and others who appear to be as young as 17, BuzzFeed News reports. "We have no idea of how many people have seen the files — they could have been viewed within cache,” said security researcher Troy Hunt, who discovered the breach. BuzzFeed made Health Solutions administrator Rodrigues Kustas aware of the leak when they called for comment. “Look, we are not the doctors, we merely do blood tests for patients," he said. "We also have more than 250 franchisees all over Mumbai who do tests for us, so maintaining doctor-patient privacy is not something that we as the lab are concerned with.” The information has since been taken down.
Full Story