Clinics ⚠️ CB1 Medical: Patient/Clinic Data Breach

[joint_account]

Hopefully the document is not accessible anymore as that is where the info is and I'm personally waiting for an update on what action is needed to be taken by patients to try to prevent fraud of any kind occurring here. As soon as we find out anything we'll update here

It triggered old emotions for sure with her as in the past it caused so much stress when fraud actually did happen but I'm hoping it really doesn't come to that
Cheers dude for the support

Really hoping this doesn't have any far reaching consequences.

What an absolute shit show.

So I guess you sit tight and see if their response is good enough? And if it isn't then you cross that bridge when you get to it?

 

[OldBloke]

Apart from the direct effects on patients, dreadfull as they are, the tsunami of patient churn that has likely already started could be crippling for some clinics who sit at the top of the popularity ratings if they cannot scale up resources very rapidly. CB1 Medical itself will likely find their servers and phone services will buckle on monday morning.

Already seeing SM posts : " I'm moving clinics now..." etc. PITA is an understatement.

 

[joint_account]

Apart from the direct effects on patients, dreadfull as they are, the tsunami of patient churn that has likely already started could be crippling for some clinics who sit at the top of the popularity ratings if they cannot scale up resources very rapidly. CB1 Medical itself will likely find their servers and phone services will buckle on monday morning.

Already seeing SM posts : " I'm moving clinics now..." etc. PITA is an understatement.

For sure, given they're 1 of 4 proper budget clinics I can certainly see that.

Curaleaf isnt loved by many but I can see Alternaleaf and Medicann getting the influx.

Id hope the prepared launch of Medicann and the recent staff influxes at Alternaleaf is able to cope but it wouldn't surprise me to see these guys have further issues over the next few weeks.

MC really is the wild west sometimes.

 

[GrownHealth]

Really hoping this doesn't have any far reaching consequences.

What an absolute shit show.

So I guess you sit tight and see if their response is good enough? And if it isn't then you cross that bridge when you get to it?

Actually thinking about it for a minute and prevention is better then cure so I think we'll get a new card to be on the safe side that way as in the past that was how we were targeted so It'll put our minds at ease a bit although we then have contact all the card payment bills but hey ho.
As for clinics we'll see how this unfolds but the will to move was already there for another reason but what a week it's been

 

[joint_account]

Actually thinking about it for a minute and prevention is better then cure so I think we'll get a new card to be on the safe side that way as in the past that was how we were targeted so It'll put our minds at ease a bit although we then have contact all the card payment bills but hey ho.
As for clinics we'll see how this unfolds but the will to move was already there for another reason but what a week it's been

100% agree. On things like this it's better to be safe than sorry.

I hope it all works out okay, I hope the pair of you have some extra meds on hand to deal with this bollocks lol.

 

[Highthere]

If I was a CB1 Medical patient, I would make sure to triple-check the source of any received contact from them (or any subsequent MC clinics) as that information, whether easily accessible (like the current situation where any Google savvy person can search for it) or not (where only deepweb divers offer it for bulk purchase), is more permanent than you.

Any name on that list is a ripe target and has to act accordingly.

 

[Ben710]

All documents have now been removed!

I guess we now have to wait and see how the clinic handles it from here.

 

[joint_account]

All documents have now been removed!

I guess we now have to wait and see how the clinic handles it from here.

I can only imagine how many copies now exist. I think taking something down 16 hours after it becomes public knowledge isn't going to do them any favours.

 

[GrownHealth]

 

[joint_account]

View attachment 7924

Maybe I'm getting ahead of myself but I think this is the end for CB1 Medical as a recommended, trustworthy clinic.

I just can't see how their reputation is going to recover. Maybe they become the 2nd all-free clinic or something in time.

 

[Bryan]

Maybe I'm getting ahead of myself but I think this is the end for CB1 Medical as a recommended, trustworthy clinic.

I just can't see how their reputation is going to recover. Maybe they become the 2nd all-free clinic or something in time.

Hi mate hope your good
This has just made some consering reading regarding CB1 medical.
Still trying to get off the ground with this to find myself mabe having to start again with a new clinic!

 

[Muiredach]

I can only imagine how many copies now exist. I think taking something down 16 hours after it becomes public knowledge isn't going to do them any favours.

Just to note, literally inside 10 minutes of us posting (and trying to contact CB1 Medical) - they had already tried to get Scribd to remove the link.

 

[joint_account]

Hi mate hope your good
This has just made some consering reading regarding CB1 Medical.
Still trying to get off the ground with this to find myself mabe having to start again with a new clinic!

My advice is wait for their patient response and then go from there to be honest.

 

[GrownHealth]

 

[joint_account]

Just to note, literally inside 10 minutes of us posting (and trying to contact CB1 Medical) - they had already tried to get Scribd to remove the link.

That's fantastic, but it's more the not knowing how it happened.

The fact a customer found this and they didn't detect a breach is insane.

Lets make no mistake this would still be available if it wasn't for the wise actions of one particular Reddit user.

In my books, they've lost all credibility they had as a competent data handler.

 

[Muiredach]

The fact a customer found this and they didn't detect a breach is insane.

What's most insane is that it was uploaded to Scribd on 7th June! It sat there for exactly 10 weeks before anyone found it.

In my books, they've lost all credibility they had as a competent data handler.

They will learn from this no doubt, but yes, it's going to be a massive knock to their public credibility.

I'm actually hoping the good that comes out of this is that other clinics will tighten up data handling.

 

[joint_account]

What's most insane is that it was uploaded to Scribd on 7th June! It sat there for exactly 10 weeks before anyone found it.


They will learn from this no doubt, but yes, it's going to be a massive knock to their public credibility.

I'm actually hoping the good that comes out of this is that other clinics will tighten up data handling.

I didn't even notice that bit. Holy shit. I don't even know what to say to the fact it was available for 10 weeks.

Employing a service that actively searches for breaches should be a bare minimum in an industry like this. I assume if will be now.

I sure hope the industry listens and follows suit, it bloody needs to.

What a weekend for you guys at HQ!

 

[JDVaper]

What's most insane is that it was uploaded to Scribd on 7th June! It sat there for exactly 10 weeks before anyone found it.


They will learn from this no doubt, but yes, it's going to be a massive knock to their public credibility.

I'm actually hoping the good that comes out of this is that other clinics will tighten up data handling.

10 weeks - that's unbelievable !!! Feck me !

 

[Bryan]

Oh Dear

 

[Highthere]

There's almost no benefit to staying with CB1 Medical if other choices are freely available and easy to switch to for patients (which currently is the case). Such a serious breach of sensitive medical data is devastating for any company, but potentially devastating for every name on that list. Everyone listed is now a target for phishing scams, identity theft and blackmail. Unless crime has stopped altogether by the time I post this, then surely some bad faith actors will threaten (via email) to expose your cannabis use to your employers, social services, affiliates, family and friends unless you pay a quick fee.

I personally would try to distance myself as far as possible from the published email address and start a new one. Start the process of changing your email to one that bears no resemblance to the published email ASAP.

Edit: Changed the tone of the last paragraph. I initially posted a softly worded recommendation just so not to unnerve those affected. However, this is a serious matter and requires some urgent preemptive measures. You'll feel better once you do.