MX Hova Health 2018 Technical Error (Q16763)

From Open Risk Manual
A data breach risk event
Language Label Description Also known as
English
MX Hova Health 2018 Technical Error
A data breach risk event

    Statements

    January 2018
    0 references
    On August 3rd, I have discovered that personal information of 2,373,764 patients from Mexico is publicly available through a misconfigured MongoDB instance. Data included such fields as: Full name and gender; CURP number (i.e. Personal ID Code Number, a unique identity code for both citizens and residents of Mexico); Insurance policy number and its expiration date; Date of birth; Home address; Disability and migrant flags [] Upon analyzing the content of database, I have identified the alleged owner of the information, Hova Health company, a telemedicine company focused on two main areas: Telemedicine (Teleradiology Telehealth) and software development for the health sector. (English)