- Joined
- Mar 3, 2018
- Messages
- 1,713
According to a recent BBC report, about 2.7 million calls made to a Swedish national health service telephone line have been "exposed." The calls date back to 2013, and supposedly contain sensitive medical information and social security numbers, while Martin Svensson says that there was no encryption or authentication on the server the calls were found on. From the looks of things, all 170,000 hours of those calls were stored out in the open as uncompressed, unprotected .wav files, but access to the website is "currenty blocked."
"We were absolutely astounded by what we found on there. People talking about their symptoms, diseases, their kids' illnesses, giving out their social security numbers. This data is as private as it gets," explained Marcus Jerrang, editor-in-chief at Computer Sweden. Sweden operates a national advice line - 1177 - run by a firm called Medhelp. In turn, this Swedish firm subcontracts out-of-hours calls to Medicall. Medicall had not responded to requests for comment from the BBC. Mr Jerrang told the BBC that a brief conversation between the reporter who uncovered the website and Medicall chief executive Davide Nyblom ended with him denying such a breach was possible and then hanging up when the reporter offered to play one of the files.
"We were absolutely astounded by what we found on there. People talking about their symptoms, diseases, their kids' illnesses, giving out their social security numbers. This data is as private as it gets," explained Marcus Jerrang, editor-in-chief at Computer Sweden. Sweden operates a national advice line - 1177 - run by a firm called Medhelp. In turn, this Swedish firm subcontracts out-of-hours calls to Medicall. Medicall had not responded to requests for comment from the BBC. Mr Jerrang told the BBC that a brief conversation between the reporter who uncovered the website and Medicall chief executive Davide Nyblom ended with him denying such a breach was possible and then hanging up when the reporter offered to play one of the files.