A massive data breach at California-based Archer Health, Inc. has exposed more than 145,000 sensitive medical files after an unprotected database was discovered online.

Cybersecurity researcher Jeremiah Fowler reported the incident to Website Planet after finding a publicly accessible database with 145,596 files totaling 23 GB that was neither password-protected nor encrypted.

The exposed documents included assessments, home health certifications, care plans, discharge forms, and internal records containing both Personally Identifiable Information (PII) and Protected Health Information (PHI).

A limited review of the files revealed details such as names, Social Security numbers, patient ID numbers, addresses, phone numbers, diagnoses, and treatments. Fowler immediately issued a responsible disclosure notice to Archer Health, and the database was secured within hours. Archer Health confirmed the issue and stated: “We take data security and patient privacy very seriously. Our team is actively investigating this matter and will address any security issues promptly.”


Buy ExpressVPN with PayPal or Credit Card
Advertisement
READ
GitHub Breach Linked To Malicious Nx Console VS Code Extension