CLEVELAND – Several federal lawsuits filed in Cleveland claim a company that connects patients in Ohio to providers of medical marijuana cards exposed nearly one million patient records online.

The six lawsuits allege Ohio Medical Card, also known as Ohio Medical Alliance, revealed social security numbers, medical records and mental health evaluations. Jeremiah Fowler, a cyber security researcher, stated in a blogpost that he informed the company about the accessibility of the database.

Records he provided appear to show one patient’s weight, body mass index, medications, anxiety diagnosis and other diagnoses, as well as her address, WOSU reported .

Fowler blurred and redacted the images to protect the person’s identity before sharing the screenshots .

The state’s Division of C

See Full Page