Flawed Patient Portal Left Thousands of Dental Records Exposed to Unauthorized Access

Practice by Numbers' patient portal contained a critical access control vulnerability that allowed any authenticated user to retrieve other patients' medical documents by simply manipulating sequential document identifiers in URLs. This incident exemplifies an alarming industry trend where companies lack proper security disclosure channels, leaving sensitive patient data at risk until external media pressure forces remediation.