A point-of-sale system vendor that serves U.S. medical and recreational cannabis dispensaries left an unprotected database exposed to the internet. The leaked data included more than 85,000 files, including scanned government and employee IDs, exposing personally identifiable information for over 30,000 individuals. Exposure of data about individuals who have purchased marijuana for medicinal or recreational use use could have profound implications for the individuals involved. Its not clear whether the data in the exposed database was inappropriately viewed or used.”]
Source: https://www.cuinfosecurity.com/pos-vendor-for-cannabis-dispensaries-exposed-data-report-a-13643