2.7 million private recordings of Swedish patients exposed on a web server

The web server used by Medicall, in its MedHelp call center service, to resolve the medical queries of patients in Stockholm, Södermanland and Värmland in a telematic way, was available over the Internet without any authentication.

Thus, 2.7 million recordings dating since 2013 were exposed, sorted by date and identified by 57,000 patient phone numbers describing the symptoms of adults and children, as well as personal data such as social security numbers.

The exposed URL is no longer available.