Unbelievable. Or maybe too believable...
I previously posted about Bolton Walk-in Clinic in Ontario not locking down their patient data despite multiple responsible disclosure alerts (https://infosec.exchange/@PogoWasRight/113589181607493357). Then I reported that Canada's cybersecurity agency contacted me and offered to help (https://infosec.exchange/@PogoWasRight/113589757905504474).
Well, they tried... but got no results either. Bolton Walk-In Clinic is *still* exposing patient data and didn't even do anything when contacted by Canadian federal police.
If any Canadian news outlet would like to report on this, get in touch. JayeLTee (npub16t3…dfw5) and I will share the information with you (yes, I just volunteered him too). 😂
Or if anyone is in the vicinity of their clinic, maybe stand outside with a sign that says, "Bolton Walk-In Clinic is leaking patient data and ignoring alerts!" That might get some attention...
Bonus points if you get someone in a Santa outfit to stand outside their clinic with a sign that says "Bolton Walk-In Clinic is naughty -- they are leaking patient data."
#dataleak #negligence #healthsec #PHIPA #HIPA #cybersecurity #databreach #accountability
Dissent Doe :cupofcoffee:
npub17l…k4kr3
2024-12-16 18:23:58 UTC
Author Public Key
npub17l5x90j8qck2eeyjdqhshha8lp6vyq6vh3w7v5qp2gcfzhsma0lshk4kr3Seen on
wss://relay.momostr.pinkPublished at
2024-12-16 18:23:58 UTCEvent JSON
{
"id": "908585fcbfa87b7e07e4135e4c630ddbb845326472e6bef4edf63563363d222b",
"pubkey": "f7e862be47062cace492682f0bdfa7f874c2034cbc5de650015230915e1bebff",
"created_at": 1734373438,
"kind": 1,
"tags": [
[
"t",
"negligence"
],
[
"t",
"databreach"
],
[
"t",
"hipa"
],
[
"proxy",
"https://infosec.exchange/@PogoWasRight/113663897687639896",
"web"
],
[
"t",
"accountability"
],
[
"t",
"cybersecurity"
],
[
"p",
"d2e37c06e9f2286fd564f2688e030e7486ed730f7d0cfec35e1c64b50f3a6296"
],
[
"t",
"healthsec"
],
[
"t",
"phipa"
],
[
"t",
"dataleak"
],
[
"proxy",
"https://infosec.exchange/users/PogoWasRight/statuses/113663897687639896",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/PogoWasRight/statuses/113663897687639896",
"pink.momostr"
],
[
"-"
]
],
"content": "Unbelievable. Or maybe too believable...\n\nI previously posted about Bolton Walk-in Clinic in Ontario not locking down their patient data despite multiple responsible disclosure alerts (https://infosec.exchange/@PogoWasRight/113589181607493357). Then I reported that Canada's cybersecurity agency contacted me and offered to help (https://infosec.exchange/@PogoWasRight/113589757905504474).\n\nWell, they tried... but got no results either. Bolton Walk-In Clinic is *still* exposing patient data and didn't even do anything when contacted by Canadian federal police. \n\nIf any Canadian news outlet would like to report on this, get in touch. nostr:npub16t3hcphf7g5xl4ty7f5guqcwwjrw6uc005x0as67r3jt2re6v2tqawdfw5 and I will share the information with you (yes, I just volunteered him too). 😂 \n\nOr if anyone is in the vicinity of their clinic, maybe stand outside with a sign that says, \"Bolton Walk-In Clinic is leaking patient data and ignoring alerts!\" That might get some attention... \n\nBonus points if you get someone in a Santa outfit to stand outside their clinic with a sign that says \"Bolton Walk-In Clinic is naughty -- they are leaking patient data.\" \n\n#dataleak #negligence #healthsec #PHIPA #HIPA #cybersecurity #databreach #accountability",
"sig": "17a741dd9f0043335624ec9da53ebc5e91fce6a9e2c1541a13b3dd8c20efa6551ddf3199ef6eaf3650449e86dbd8df0d6a992f12b39d4ae428a5a2edbafdb91d"
}