Data breach exposes personal information of thousands of medical marijuana patients, including Ohioans

On January 24, 2020, security analysts revealed that a data breach exposed the personal information of 30,000 medical marijuana patients across the country, including patients in Ohio. Bloom Medicinals, which operates five dispensaries in Ohio, was one of the companies subject to the breach due to a weakness within its software system. The developer of the system, THSuite, stated that it has internally “found no evidence that the data was viewed by anyone other than the security analysts who notified our company,” but the investigation is ongoing.

Bloom Medicinals has promised updates once more information regarding the vulnerability is available and that it will notify affected patients once its investigation is complete.