A cyberattack on Nevada's medical marijuana program database exposed the personal information of approximately 11,700 individuals, according to LasVegasNow.com.
The addresses, driver's license numbers, dates of birth and Social Security numbers of individuals who applied for a medical marijuana dispensary license were posted on the internet. The applicants' employees' information was leaked online as well, according to the Las Vegas Review-Journal.
The Nevada Division of Public and Behavioral Health uncovered the breach Dec. 28 and immediately shut down the database.
"The entire portal has been taken down," said DPBH Administrator Cody Phinney in a press release. "To prevent further breaches, the division's IT staff are working with state IT staff investigating the breach. We appreciate everyone's patience during this difficult time. As more information is known, the public will be notified."
Nevada's DPBH has notified credit reporting agencies Equifax, Experian and TransUnion of the breach.
More articles on health IT:
12 healthcare ransomware attacks of 2016
16 most popular health IT lists of 2016
$15k in electronic, computer items stolen from Pennsylvania outpatient hospital