This week, the Indiana Department of Health issued a notice that the state’s COVID-19 contact-tracing system had been exposed via a cloud misconfiguration, revealing names, emails, gender, ethnicity, race and dates of birth of more than 750,000 people.
The incident shows that COVID-19 data could be poised for abuse and misuse, according to experts, which is now being collected on millions of people across the globe. The question is whether it’s being adequately protected from threat actors. And it turns out, there might be some work to be done on the security front.
Read more…
Source: ThreatPost