LogBox, a South African medical data startup that bills itself as an “absolutely secure” way of replacing paper forms for sharing patient data with doctors, has exposed user accounts and patient data following a security lapse. Security researcher Anurag Sen found an exposed database belonging to the company containing account access tokens for thousands of LogBox users, which if used would grant full access to users’ accounts without requiring their password, Sen said.

Read full article on TechCrunch