

He said the issue was discovered by a Comparitech researcher, who scans the internet for unsecured databases, on Feb.

"That's four images per person, the front and back of two pieces of ID." "That's based on there being about 207,000 total images in the database," Bischoff said. "It took them a few days to get it secured."Ĭomparitech found that roughly 52,000 Premier Diagnostic patients were affected by the possible breach. "We don't know for sure that any malicious parties got to it, but we've run honeypot experiments before where we see activity on that sort of unsecured data within a matter of hours," Bischoff added. moves to moderate COVID-19 transmission levelĪnyone with the knowhow, like cyber criminals, could access all of that personal and private data with minimal effort. "They had stored all that data on a server that was publicly accessible online without a password." "They take a photo of your ID, the front and back of your ID and the front and back of your medical insurance card," Bischoff said. In order to get tested, customers must submit front and back pictures of their insurance ID cards, as well as driver's licenses, passports or other forms of ID. Premier Diagnostics operates 11 COVID-19 testing sites across northern Utah. "So, your ID and your medical card are probably somewhere on the dark web." "This data could be in anyone's hands now," said Paul Bischoff, editor of. LEHI, Utah - A Consumer privacy watchdog, "Comparitech," found that Lehi based company Premier Diagnostics was storing sensitive customer information on a publicly accessible server, leading to a potential data breach for over 50,000 customers.
