Plastic Surgery Images and Invoices Leak From Unsecured Database

Thousands of images, videos and records pertaining to plastic surgery patients were left on an unsecured database where they could be viewed by anyone with the right IP address, researchers said Friday. From a report: The data included about 900,000 records, which researchers say could belong to thousands of different patients. The data was generated at clinics around the world using software made by French imaging company NextMotion. Images in the database included before-and-after photos of cosmetic procedures. Those photos often contained nudity, the researchers said. Other records included images of invoices that contained information that would identify a patient. The database is now secured. Researchers Noam Rotem and Ran Locar found the exposed database. They published their research with vpnMonitor, a security website. Rotem said he sees exposed health care databases all too often as part of his web-mapping project, which looks for exposed data. "The state of privacy protection, especially in health care, is really abysmal," Rotem said.

Re:

[omnichad]

And not just payment. Imagine your malpractice premiums if you weren't required to keep photographic evidence of before, during and after

Re:

[awwshit]

You don't think your doctor should keep records? What if you come back? What if there is a complication or disagreement, should there be no records?

Re:

[demonlapin]

It's usually a requirement to prove what they did and didn't do. Here's what they looked life before, here's after, and no, I didn't put that ugly lump in there.

It's also a requirement for them to get and maintain their board certification in plastics, if they have it (most do, but some don't, as it's not a legal requirement). And they'll offer up anonymized samples in a photo book to potential clients as examples of their work (see, here's a breast lift with augmentation, and here's one without augmentati

So a nude picture in an exposed database?

[The Snazster]

Would a nude picture in an exposed database constitute a double-exposure?

Re: So a nude picture in an exposed database?

[aeropage]

Not after you multiply by the mutiverse...

Amazon Web Services FTW

[omnichad]

Does literally anyone know how to properly apply security policies to an S3 bucket?

Re:

[PIBM]

He probably did but wanted to have something to look at from home ...

Re:

[opigdfsgsdf]

That's the problem with Internet. It's so freaking difficult to find porn that it gets people to do crazy stuff.
I have hear some people actually go outside looking for the "real thing", whatever that is.