Your medical marijuana info may have leaked in this major dispensary breach

Tens of thousands of cannabis users’ personal data has been exposed, including information belonging to medical marijuana patients, due to a breach of a sales system used throughout the industry.

Internet privacy researchers at vpnMentor discovered the data breach in THSuite, a cannabis point-of-sales system. The exposed data was discovered in a completely unsecured and unencrypted Amazon S3 bucket owned by the company. 

The data was first discovered on Christmas Eve of 2019. vpnMentor’s researchers, led by Noam Rotem and Ran Locar, contacted THSuite soon after. The exposed database was finally closed on Jan. 14 of this year. Read more...