Unsecured database contains over 1 billion records related to CVS Health website visitor activity. It did not contain customers’ directly identifiable personal or health information. The database was likely unsecured because of a misconfiguration, a security researcher says. The records also contained an unspecified number of email addresses of customers who appear to have inadvertently typed in their email addresses in the website’s search bar. CVS says the database was quickly secured by a vendor that managed it for CVS and it was quickly taken down.”]
Source: https://www.govinfosecurity.com/researcher-1-billion-cvs-health-website-records-exposed-a-16890