Highly Sensitive Medical Cannabis Patient Data Exposed by U D… Lily Hay Newman Matt Burgess Aug 19, 2025 12:14 As legal cannabis has expanded around the United States for both recreational and medical use, companies have amassed troves of data about customers and their transactions. People who have applied for medical marijuana cards have had to share particularly personal health data to qualify. For some patients in Ohio who use medical weed, a recent data exposure could impact their sensitive information. Security researcher Jeremiah Fowler found a publicly accessible database in mid-July that appeared to contain medical records, mental health evaluations, physician reports, and images of IDs like driver's licenses for people seeking medical cannabis cards. The 323GB trove stored close to a million records, including Social Security numbers, email addresses, physical addresses, dates of birth, and medical data—all organized by name. Based on information that seemed to describe specific employees and business partners, Fowler suspected that the data belonged to the Ohio-based company Ohio Medical Alliance LLC, which goes by the name Ohio Marijuana Card. Fowler contacted the company on July 14; when he checked the database the next day, it had been secured and was no longer publicly accessible online. Fowler did not receive a response about his submission. Ohio Medical Alliance did not answer WIRED's questions about Fowler's findings. At one point, though, the company's president, Cassandra Brooks, wrote in an email: “I need time to investigate this alleged incident. We take data security very seriously and are looking into this matter.” “There were physicians' reports that would say what the underlying problem was—whether it was anxiety, cancer, HIV, or something else. In some cases, the applicants would submit their own medical records as proof” of their qualifying condition, Fowler tells WIRED. “I saw identification documents from lots of states, from everywhere. And I even saw offender release cards, which are basically IDs for people who just got out of prison that they submitted as proof of identity to get a medical marijuana card.” Fowler says that most of the files in the database were image formats like PDFs, JPGs, and PNGs. One CSV plaintext document called “staff comments” appeared to be an export of internal communications, appointment histories, notes about clients, and application status. That file also contained more then 200,000 email addresses of Ohio Medical Alliance employees, business associates, and customers. Databases that are misconfigured and have inadvertently been left publicly exposed on the open internet are a common problem online in spite of efforts to raise awareness about the mistake and its privacy implications. https://archive.is/2025.08.19-162434/https://www.wired.com/story/highly-sensitive-medical-cannabis-patient-data-exposed-by-u-database/

Welcome 🤗

Preorders are a scam

The easiest way to farm nostr is to find some obscure but interesting accounts on IG and the likes and just copy their content here. No way to verify they are legit if they don’t post any proof - and no one will care to ask for it because they are not a “big deal”. If I were a scammer this is what I would do at scale. Just saying …

I prefer “cult” but family works too 😂

GM nostr ☀️ How are we feeling today?

Slop? 😆

I see your content. Many do, even if they don’t interact with it. It’s the nature of social media - 90% lurkers. You’re not posting into the void.

I see your content all the time. Beautiful scenery 😻 You can get a better sense of how many people see your content with media analytics through something like nostr.build. They count how many times their server was queried. It’s hard to get view counts probably due to how relay connections work - you’d never see the stats from relays you’re not connected to. Services that aggregate relays like the primal caching server would be the closest thing to a central point of truth for stats probably.

I don’t trust it. Maybe it’s all on device… but I’d rather opt into it if I wanted to, not opt out.

They have settings that literally say allow Siri to learn from this app.

It’s not an issue with design. A good error could explain the problem without spitting out the full console style error, BUT it should also give you a path to see the full error and a way to remedy it.

I’ve been watching short films instead of full movies because I don’t have time to dedicated 1-2 hours to a film. The short films are 10-20 mins each and some are decent.

Which one?

GM nostr ☀️ ☕️

Why is apple cider vinegar soooooooo good?

Things are progressing fast

Gn nostr! Keep it spicy 🌶️

Ser, that’s a podcast.

I don’t know what you’re talking about. What are organs of perception? As an aside, people have out of body experiences and many report this, yet there is little evidence to prove it aside from some of them accurately describing their surroundings when they shouldn’t have been able to. It borders on spiritual and scientific without much proof yet I cannot dismiss it because there are so many reports. Clearly something is happening it’s not all a coincidence but I won’t form any conclusions unless we have a way to prove there is something beyond being in your body. But the scientific community doesn’t need to conspire to shun those who study this area because they ultimately want verifiable and reproducible data. Too many quacks and grifters use the victim excuse to pretend like there is some grand plan to stop them from speaking the truth. If it is the ultimate truth, prove it.

This was a fun one to work on! Hope you like it!

Japan has been moving towards complete integration with the national ID recently. They’ve had it for a while, but now I’m seeing businesses being forced to use their scanning units. To get any service, you have to scan your card and then do a face scan. There is a button to refuse the scan which I personally press every time - but my guess this is just a warming up period until they completely remove that option. It’s creepy and dystopian but is quickly becoming the norm. Last year it wasn’t really a thing but now it’s rolling out in more places.

I don’t understand hashtag abusers. It’s like a mental illness or something.

😬

Citrus sky

Is it hard to grow grapes 🍇?

Beauty everywhere 😌

It’s ironic that Apple always talks about privacy being important but then uses all the user data to train its models. You have to opt OUT.

When people ask you where you’re from and you’ve lived in a bunch of places about an equal amount of time, how do you answer that?

#steakstrs 🥩

You ever put delicious natural food in your mouth and instantly appreciate how lucky you are to be alive to enjoy it? And maybe even wonder in awe that such thing even exists and you get to taste it? I ate some mango the other night and had this thought… it was grown from the ground, basked in the glory of sun only to end up in my mouth… what a cosmic coincidence of bliss.

I have a very favorable climate. Was thinking in my back yard