Privacy Firm Finds Cannabis Patient Info Left Unsecured by Washington Firm

January 30, 2020

An internet privacy firm says it was able to access private personal information of more than 30,000 medical marijuana patients, recreational pot customers or dispensary employees in several states.

The privacy firm was searching for unsecured data online and says the database has now been secured.

The privacy firm, vpnMentor, said in a report posted on its website that Seattle, Wash.-based software firm THSuite had failed to encrypt or secure the data, which was stored in the cloud via Amazon Web Services. It discovered the breach Dec. 24, and the database was closed Jan. 14.

THSuite did not return an email seeking comment. The company provides point-of-sale software for the cannabis industry that can integrate with state-mandated marijuana tracking systems.

Among the dispensaries with unsecured customer and employee information were Amedicanna, a marijuana dispensary in Maryland, and Bloom Medicinals, with several locations in Ohio, the privacy firm said. A recreational pot retailer in Colorado, Colorado Grow Company, was also affected, though it wasn’t clear if customer information was involved.

Among the unsecured patient information were full names, birth dates, and signatures as well as street and email addresses. There was also information about dispensary inventory, sales and employee names, the privacy firm said.

VpnMentor said it only checked a small sample of the records, and it’s certain that many more dispensaries could have the same problem. “It’s possible that all THSuite clients and their customers were involved,” it said.

The privacy firm said the breach could raise issues regarding patient privacy under federal law.

Was this article valuable?

Here are more articles you may enjoy.

Latest Comments

  • February 11, 2020 at 7:15 am
    PolarBeaRepeal says:
    You mean this one? yes, I did, since you know, I referenced the study... read more
  • February 7, 2020 at 11:14 am
    Rosenblatt says:
    Your silence is golden, Polar. I also think it's funny how the only thing I can find for where your quote might have come from are two 2016 news articles, and neither article ... read more
  • February 6, 2020 at 8:55 am
    Rosenblatt says:
    Jon: post a link Polar: quotes something referencing Jon's link Jon: that's not the quote in my link. here's the quote Polar: I was quoting something else Rosenblatt: Please p... read more

Add a CommentSee All Comments (31)Add a Comment

Your email address will not be published. Required fields are marked *


More News
More News Features