company

Qbusoft

Polish software company that develops the Medyc medical records and practice management platform.

Current clusters

SQL injection in Qbusoft's Medyc software exposed Polish patients' PESEL numbers

Qbusoft confirmed an attacker stole patient data from its Medyc clinic software through an SQL injection flaw that went unnoticed for about 17 days. It is the second Polish clinic-software supplier to lose ID numbers in weeks, after MyDr lost data on nearly 19 million people in August.

Publishers:helpnetsecurity.com

Reality

Evidence60
Adoption: Insufficient
Hype gap−10
Incentives55
Confidence55

security1 publisher

Attacker pulled Polish patients' ID numbers from Medyc maker Qbusoft via SQL injection

Qbusoft's Medyc platform lost Polish patients' PESEL numbers and contact details to an SQL injection exploited in late August and caught on September 9. An addiction clinic says treatment records were likely taken too, and Poland's data regulator has ordered an audit of the supplier.

Publishers:therecord.media

Reality

Evidence58
Adoption: Insufficient
Hype gap+5
Incentives50
Confidence55