A security researcher discovered an unsecured database containing nearly a million records from an Ohio medical cannabis company, exposing Social Security numbers, IDs, medical conditions, and more. The files included doctors’ notes, mental health evaluations, and even images of driver’s licenses and prison release cards submitted by patients applying for medical marijuana cards. Although the database was quickly locked down after being flagged, the company has not explained how such highly sensitive information was left exposed to anyone online.

Via Wired