By and large, the companies that Epic is suing seemed to be seeking medical data to sell to attorneys looking to establish mass tort cases involving many patients suffering similar injuries or conditions. In total the companies accessed 300,000 medical records under these alleged false pretenses.
Security researchers have discovered a three-decade-old DICOM vulnerability that exposed millions of patient health records to unauthorized access and manipulation.
Healthcare giant CVS exposed over a billion health records through a misconfigured cloud database leak, including visitor and session IDs, device information and multiple records for medications.



