Insurance startup leaks sensitive customer health data

Zack Whittaker reports:

A software startup that provides independent insurance brokers with customer management software has exposed highly sensitive information on thousands of insurance policy holders.

A vast cache of data was stored on Amazon S3 storage bucket by AgentRun, a Chicago, Ill.-based company founded in 2012 by Andrew Lech, a former independent insurance broker.

The bucket stored thousands of files of broker clients using the company’s platform, including highly sensitive personal information like insurance policy documents, health and medical information, and some financial data.

The bucket wasn’t protected with a password and was accessible by anyone.

Read more on ZDNet/

About the author: Dissent

Comments are closed.