French plastic surgery technology company NextMotion exposed sensitive images of plastic surgery patients. Almost 900,000 images showed patients faces and parts of their bodies. The images were often highly sensitive, showing genitalia and other body parts. The company was quick to clarify what hadnt been exposed – only the media database was exposed, not the patients’ database. The exposed paperwork and invoices also contained Personally Identifiable Information (PII) data of patients. This type of data can be used to target people in a wide range of scams, fraud and online attacks.”]
Source: https://nakedsecurity.sophos.com/2020/02/18/sensitive-plastic-surgery-images-exposed-online/