Plastic surgery is Sexual Wishlist (2014) Watch onlinemore mainstream than it's ever been, but that doesn't mean patients are dying to have their cosmetic laundry aired in public.
Security researchers at vpnMentor discovered that about 900,000 images and invoices from cosmetic surgery imaging company NextMotion were sitting on an unsecured database in cloud storage. The exposed files included detailed invoices of procedures, as well as explicit images and 360-degree videos of patients' faces and bodies, including breasts and genitalia.
The report (via CNET) found that the breach could affect thousands of patients whose doctors use technology and software provided by NextMotion at 170 clinics around the world. The researchers discovered the vulnerable database during their "web mapping" project, which scans the internet and cloud for weaknesses.
"Our team was able to access this database because it was completely unsecured and unencrypted," the report reads.
That's contrary to NextMotion's claims on its website that "all your data is 100% secure." The culprit of the breach was a NextMotion Amazon Web Services (AWS) S3 bucket, a kind of digital cloud storage technology akin to a file folder. S3 buckets have been linked again and again to exposed databases of customer information when companies fail to secure them properly.
The researchers contacted NextMotion when they discovered the vulnerability and it has since been secured.
"We immediately took corrective steps and this same company formally guaranteed that the security flaw had completely disappeared," NextMotion writes on its website.
Cases of bungled cloud storage seem a dime a dozen these days, but the common scenario — of a company not taking the appropriate steps to obscure and secure its online databases — takes on a new and disturbing urgency when the content contains medical records and, frankly, nude photos. The images contained identifying information of patients, as well as before-and-after photos of procedures.
Even if everyone from Bella Hadid to your coworker Jill in marketing is getting a Botox brow lift, they don't necessarily want the world to know.
Topics Cybersecurity
(Editor: {typename type="name"/})
Ireland fines TikTok $600 million for sharing user data with China
When Michelle Obama goes high, she takes every woman with her
5 most savage quotes from damning report on the 'digital gangsters' at Facebook
Apple plans to merge iOS and macOS apps by 2021, report says
'Anthem' review: BioWare's dance with 'Destiny' has a rough start
New Apple rumor is every fan's dream come true
Danny Elfman transformed Donald Trump's debate stage lurking into a horror film
Dyson V8 Plus cordless vacuum: $120 off at Amazon
More people were arrested for weed possession last year than violent crimes like murder
NYT Connections Sports Edition hints and answers for May 19: Tips to solve Connections #238
How to speed up Google Chrome and Mozilla Firefox using OneTab
接受PR>=1、BR>=1,流量相当,内容相关类链接。