Ohio medical marijuana patients among more than 30,000 exposed in data breach

One Ohio medical marijuana dispensary was exposed in a national data breach leaking personally identifiable information for more than 30,000 people.

Bloom Medicinals, which operates five dispensaries in Ohio, was one of three cannabis companies identified in a Wednesday report revealing a recent leak involving THSuite, which provides point-of-sale systems to cannabis stores.

Internet researchers at vpnMentor were able to see patient and sales data, as well as dispensary compliance reports. Specifically, they were able to see patients’ names, date of birth, phone number, email address, street address, date of first purchase and whether or not the patient received financial assistance for purchases.  

Researchers said patients could be harmed by having their identity leaked because marijuana remains illegal on the federal level and there is a stigma around its use.