Nude “before and after” photos stolen from plastic surgeon, posted online, and sent to victims’ family and friends::The FBI is investigating a data breach where cybercriminals were able to steal patients’ records from a Las Vegas plastic surgeon’s office and then publish them online.
deleted
Let me guess without reading the article: The data was stored on an unecrypted drive connected to a computer in a network running with Windows, Active Directory, and Outlook/Exchange?
With that combo, you can just post your “secret” data on the web site, it won’t make much of a difference.
Spot on lmao
According to 8NewsNow, about a dozen women have since filed a lawsuit against the firm, claiming they did not do enough to protect their private and personal information. None of the documents posted online were encrypted
Honestly the whole before/after nude photo aspect of plastic surgery feels so weird even if they’re never hacked. No other doctors do this with photos. And I get it, portfolio and all that, but at least offer a discount of something. But everyone? For medical reasons? Not even just kinda creepy, that’s meaningfully creepy. And as made evident by this breach, not even a little surprising that they have substandard information security policies. Anybody at the office could probably get access to the shared folder they probably stuff these into. And the doctor’s kids all probably know his crappy password that never changes. So so so many ways this could and will go wrong.
How do you track and improve impact and quality of work without before and after documentation?
Notes? Close-up wound/scar photos? Any number of ways every other doctor manages to handle it?
