AstraZeneca password lapse exposed patient data • ZebethMedia

Pharmaceutical giant AstraZeneca has blamed “user error” for leaving a list of credentials online for more than a year that exposed access to sensitive patient data.
Mossab Hussein, chief security officer at cybersecurity startup SpiderSilk, told ZebethMedia that a developer left the credentials for an AstraZeneca internal server on code sharing site GitHub in 2021. The credentials allowed access to a test Salesforce cloud environment, often used by businesses to manage their customers, but the test environment contained some patient data, Hussein said.
Some of the data related to AZ&ME applications, which offers discounts to patients who need medications.
ZebethMedia provided details of the exposed credentials to AstraZeneca, and the GitHub repository containing the credentials was inaccessible hours later.
In a statement, AstraZeneca spokesperson Patrick Barth told ZebethMedia: “The protection of personal data is extremely important to us and we strive for the highest standards and compliance with all applicable rules and laws. Due to an [sic] user error, some data records were temporarily available on a developer platform. We stopped access to this data immediately after we have been [sic] informed. We are investigating the root cause as well as assessing our regulatory obligations.”
Barth declined to say for what reason patient data was stored on a test environment, and if AstraZeneca has the technical means, such as logs, to determine if anyone accessed the data and what, if any, data was exfiltrated.
Credentials, like usernames and passwords, that are exposed or inadvertently published to sites like GitHub are an increasingly common discovery for security researchers like SpiderSilk’s Hussein. In the past few years, the startup has discovered exposed data belonging to Samsung, the controversial facial recognition startup Clearview AI; and the since-rebooted movie subscription MoviePass. In August, Hussein discovered credentials belonging to Microsoft employees that had been posted inadvertently to GitHub, which Microsoft owns.
“This isn’t the first time we’ve come across leaked credentials put on Github by engineers due to human error, and it just keeps happening across the board,” Hussein told ZebethMedia. “The risk in these accidental leaks is that they occur randomly, and the exploitation path is often straightforward (i.e. making threat actors’ jobs easier).”

             Disclaimer: Any Product You Buy Here, Amazon Pays me A Commission With No Additional Fee.

 

This is a must Have Software For Your Home & Business. This software will help your business and make your job Stress Free.

Business and Office Management  Category.

(Old Version) H&R Block Tax Software Deluxe + State 2023 with Refund Bonus Offer (Amazon Exclusive) (PC/MAC Download)

(4264)

20% Off $49.99 $39.97 (as of November 21, 2024 06:11 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Choose to put your refund on an Amazon gift card and you can get a 2% bonus. One state program download included. State e-file sold separately. Reporting assistance on income from investments, stock options, home sales, and retirement Guidance on max... read more

Acrobat Pro | 1-Month Subscription | PDF Software |Convert, Edit, E-Sign, Protect |Activation Required [PC/Mac Online Code]

(1444)

$29.99 (as of November 21, 2024 06:33 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Create and edit PDFs. Collaborate with ease. E-sign documents and collect signatures. Get everything done in one app, wherever you go. Edit text and images without jumping to another app. E-sign documents or request e-signatures on any device. Recipi... read more

Adobe Photoshop Elements 2025 & Premiere Elements 2025 Student & Teacher Edition | PC/Mac Code | Box with Download Code | Photo & Video Editing | 3-year term license | Activation Required

(17)

$79.99 (as of November 21, 2024 05:39 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Remove photo objects with AI power. Create and control photo depth with AI. Change the color of any object in your photo. Seamlessly combine multiple pics. Create dynamic video titles with text styling controls. Access free Adobe Stock video title te... read more

Adobe Photoshop Elements 2025 | Photo Editing | 3-Year Term License | PC/MAC | Box with Download Code | Activation Required

(17)

$99.99 (as of November 21, 2024 05:37 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Remove objects with AI power. Create and control depth with AI. Change the color of any object. Seamlessly combine multiple pictures. Create with modern textures and graphics. Be creative with the web and mobile beta apps. Get a 3-year term license f... read more

AVG Ultimate 2024 | Antivirus+Cleaner+VPN | 5 Devices, 2 Years [PC/Mac/Mobile Download]

(1124)

14% Off $34.99 $29.99 (as of November 21, 2024 06:11 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

AVG ULTIMATE: Your all-in-one antivirus, VPN, and tuneup combo. OUR BEST SECURITY: Enjoy our advanced, real-time security for your computers, tablets, and phones. OUR BEST PRIVACY: Secure your privacy with powerful encryption so no one can see what y... read more

Bitdefender Total Security - 5 Devices | 1 year Subscription | PC/Mac | Activation Code by email

(2361)

50% Off $89.99 $44.99 (as of November 21, 2024 06:43 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows, Mac OS, iOS, and Android. Organize and keep your digital life safe from hackers. ADVANCED THREAT DEFENSE: Your software is always up-to-date ... read more

Bitdefender Total Security 2024 – Complete Antivirus and Internet Security Suite – 5 Devices | 2 year Subscription | PC/Mac | Activation Code by Mail

(3511)

$74.99 (as of November 21, 2024 05:37 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (macOS X Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later... read more

Clifford The Big Red Dog Thinking Adventures CD-ROM Parent's Guide Ages 4-6

(9)

-85% Off $2.43 $4.50 (as of November 21, 2024 05:37 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

CLIP STUDIO PAINT PRO - Version 1 - Perpetual License - for Microsoft Windows and MacOS

(3061)

$23.99 (as of November 21, 2024 06:18 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Create original sketches using your mouse or draw naturally with a pen tablet. Powerful coloring tools make CLIP STUDIO PAINT your all-in-one illustration, painting, manga and comic creation solution. Use an assortment of powerful art tools for illus... read more

CodaKid Roblox Coding, Award-Winning, Coding for Kids, Ages 9+ with Online Mentoring Assistance, Learn Computer Programming and Code Fun Games with Lua and Video Game Programming Software (PC & Mac)

(332)

$59.00 (as of November 21, 2024 05:32 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

CodaKid’s Roblox Lua coding educational software provides 100+ hours of interactive student projects designed to engage and educate kids, teaching them to become creators in their own right. Students learn real Lua coding and video game design using ... read more