2.7 million patient calls to Swedish healthcare hotline left unprotected online

[Munken89]

https://thenextweb.com/eu/2019/02/18/2-7-million-patient-calls-to-swedish-healthcare-hotline-left-unprotected-online/
https://healthitsecurity.com/news/2.7m-medical-calls-sensitive-audio-exposed-online-for-6-years

[VinZie]

I thought the Swedish were better than this.

[Spotty]

Quote

The audio recordings of 2.7 millions calls made to 1177 Vårdguiden — Sweden’s healthcare hotline — were left exposed to anyone online, according to Swedish tech publication Computer Sweden.

The 170,000 hours of incredibly sensitive calls were stored on an open web server without any encryption or authentication, leaving personal information completely exposed for anyone with a web browser.
 

The calls included sensitive information about patients’ diseases and ailments, medication, and medical history. Some examples had people describing their children’s symptoms and giving their social security numbers.

Some of the files include the phone numbers the calls were made from. Around 57,000 numbers appear in the database and many of those are the callers’ personal numbers, making it easy to match information with a particular person.

Source: https://thenextweb.com/eu/2019/02/18/2-7-million-patient-calls-to-swedish-healthcare-hotline-left-unprotected-online/
 

Quote

 

 

Why were these calls recorded in the first place?

[theblastman21]

Just now, Spotty said:

Source: https://thenextweb.com/eu/2019/02/18/2-7-million-patient-calls-to-swedish-healthcare-hotline-left-unprotected-online/
 

 

Why were these calls recorded in the first place?

Possibly for insurance, or quality purposes. 

[BobVonBob]

I'm most interested in what that makefile does, but nobody is going to report on that.

 

Better yet, the subcontractor that left all those files exposed just filed a police report against the people that exposed the breach.