150,000 Records of Home Health Care Firm Exposed on Web

Researcher Finds Database of Sensitive Patient Info With No Password Protection Marianne Kolbasuk McGee (HealthInfoSec) • September 25, 2025

An unencrypted database containing nearly 150,000 patient records of a California-based provider of home health and palliative care services was left exposed on the internet, said a cybersecurity researcher who discovered the unsecured data cache.

See Also: When Identity Protection Fails: Rethinking Resilience for a Modern Threat Landscape

The exposed 23.7-gigabyte database contained medical documents that included names, patient ID numbers, Social Security numbers, physical addresses and phone numbers belonging to Archer Health, said researcher Jeremiah Fowler, who described his findings in a report issued on Thursday.

The database also included documents labeled as assessments, home health certifications, plan of care ...