The leak of data in the cannabis dispensary payment system left personal data more than 30.00 exposed
The data leak in the cannabis dispensary payment system left the personal details of tens of thousands of marijuana users exposed, including names, medical IDs and their purchase history.
- The researchers found a data breach in THSuite, a cannabis point of sale system
- They found personal information of more than 30,000 people in the cube
- The data showed names, medical identification, addresses, last purchase and more
- It was found at Christmas even 2019 and closed on January 14 of this year
The personal information of more than 30,000 marijuana users was exposed in an insecure database on the web, has emerged.
Privacy researchers discovered a data breach in THSuite, a cannabis point-of-sale system, which contained information on patients with medical marijuana and scanned government and employee IDs.
Personal data included the client’s full names, date of birth, telephone numbers, emails, addresses, medical identification number, preferred type of cannabis, amount of purchases and more, depending on Mashable.
The records were found to come from three different dispensaries: AmediCanna Dispensary, a medical marijuana dispensary located in Maryland, Bloom Medicinals, a medical marijuana dispensary with multiple locations throughout Ohio and the Colorado Grow Company recreational dispensary.
The Amazon S3 filtered cube was first discovered on December 24, 2019 by vpnMentor experts and closed on January 14 of this year.
Scroll down to watch the video
Privacy researchers discovered a data breach in THSuite, a cannabis point-of-sale system, which contained information on patients with medical marijuana and scanned government and employee IDs
‘Cannabis dispensaries have to collect large amounts of confidential information to comply with state laws, ‘vpnMentor shared in a Blog Post on the filtered cube.
“The THSuite platform is designed to simplify this process for dispensary operators by automatically integrating with the API traceability system of each state.”
“As a consequence of this, the platform has access to many private data related to the dispensaries and their customers.”
The team discovered the unsafe deposit while conducting a large-scale web mapping project.
Personal data included the client’s full names, date of birth, telephone numbers, emails, addresses, medical identification number, preferred type of cannabis, quantity purchases and more.
The records were found to come from three different dispensaries: AmediCanna Dispensary, a medical marijuana dispensary located in Maryland, Bloom Medicinals, a medical marijuana dispensary with multiple locations throughout Ohio and the Colorado Grow Company recreational dispensary
It was seen on Christmas Eve 2019 and the owners of the information were notified days later.
On January 7, Amazon was informed about the violation, then two weeks later the cube was closed.
Investigators warn that the violation leaves clients exposed to phishing attacks and hackers could use the information to commit identity theft.
Not only are consumers at risk, but the dispensaries involved could face consequences due to the possible violation of the Health Insurance Portability and Accountability Act (HIPAA).
According to HIPAA regulations, it is a federal crime in the US. UU. That any health service provider exposes protected health information (PHI) that could be used to identify an individual. HIPAA violations can result in fines of up to $ 50,000 for each exposed record, or even in jail.
“At least, THSuite must investigate to discover how this data breach occurred and implement new security procedures to ensure that something like this never happens again,” explained vpnMentor.
“In the future, we also recommend that you carefully review the third-party services you hire to ensure they follow best practices and have multiple security measures to protect your confidential data.”
WHAT IS CANNABIS AND WHAT ARE THE PROS AND CONS?
Cannabis is an illegal Class B drug in the United Kingdom, which means that possession could result in a five-year prison sentence and those who supply the drug face up to 14 years in jail.
However, the drug is widely used for recreational purposes and can make users feel relaxed and happy.
But smoking can also cause feelings of panic, anxiety or paranoia.
Scientific studies have shown that the medication can relieve depression, anxiety and stress, but intensive use can worsen long-term depression by reducing the brain’s ability to get rid of bad memories.
It can also contribute to mental health problems among people who already have them, or increase the risk of psychosis or schizophrenia of users, according to research.
Marijuana can be prescribed for medical uses in more than half of the US states. UU., Where it is used to combat anxiety, aggression and sleep problems. Researchers are also investigating whether it could help people with autism, eczema or psoriasis.
It is claimed that cannabis oil containing the psychoactive chemical THC, which is illegal in the UK, has cancer-fighting properties, and a 52-year-old woman from Coventry says she recovered from terminal bowel and stomach cancer by taking the medicine.