'They use the same tools that we do, that we use to find the database in the first place, they use the same tools to find it and steal it.'īischoff said luckily there was no payment information tied to the database, but he is concerned about the possible leak of thousands of patient's medical insurance ID cards. 'It's low-hanging fruit it's really easy,' he said. Read: Cox demands Utahns not be 'jerks' with pandemic finish line in sight More than enough time for internet thieves to get their hands on the data, according to Bischoff. 'So, we know it was exposed between February 22nd and March first.'

'The data was finally secured on March first,' Bischoff said. He said the issue was discovered by a Comparitech researcher, who scans the internet for unsecured databases, on Feb. 'That's four images per person, the front and back of two pieces of ID.' 'That's based on there being about 207,000 total images in the database,' Bischoff said. 'It took them a few days to get it secured.'Ĭomparitech found that roughly 52,000 Premier Diagnostic patients were affected by the possible breach. 'We don't know for sure that any malicious parties got to it, but we've run honeypot experiments before where we see activity on that sort of unsecured data within a matter of hours,' Bischoff added. moves to moderate COVID-19 transmission levelĪnyone with the knowhow, like cyber criminals, could access all of that personal and private data with minimal effort. 'They had stored all that data on a server that was publicly accessible online without a password.'

'They take a photo of your ID, the front and back of your ID and the front and back of your medical insurance card,' Bischoff said. In order to get tested, customers must submit front and back pictures of their insurance ID cards, as well as driver's licenses, passports or other forms of ID. Premier Diagnostics operates 11 COVID-19 testing sites across northern Utah. 'So, your ID and your medical card are probably somewhere on the dark web.' 'This data could be in anyone's hands now,' said Paul Bischoff, editor of. LEHI, Utah - A Consumer privacy watchdog, 'Comparitech,' found that Lehi based company Premier Diagnostics was storing sensitive customer information on a publicly accessible server, leading to a potential data breach for over 50,000 customers.

Premier diagnostics sandy