<story><title>2.5M Medical Records Leaked by AI Company</title><url>https://securethoughts.com/medical-data-of-auto-accident-victims-exposed-online/</url></story><parent_chain></parent_chain><comment><author>maybelsyrup</author><text>I&amp;#x27;m a medical researcher, and I&amp;#x27;ve worked with exactly this sort of data. The number of hoops I had to jump through to even be allowed on the project was insane. Background checks, legal forms of all kinds, trainings on how to keep the data secure. Fingerprint locked rooms. Access control. And most importantly: the data themselves were air-gapped.&lt;p&gt;If I fucked up on this scale, jail would be the least of my worries. I&amp;#x27;d never work again. I&amp;#x27;d be professionally shunned forever, with no hope of redemption once my name is attached to the incident in some Google search. No more grants, no more collaborations, no nothing. I&amp;#x27;d be ruined. Frankly I&amp;#x27;d be begging to be let into prison; where else am I gonna be able to eat?&lt;p&gt;Nothing will happen to these people.</text></comment>
<story><title>2.5M Medical Records Leaked by AI Company</title><url>https://securethoughts.com/medical-data-of-auto-accident-victims-exposed-online/</url></story><parent_chain></parent_chain><comment><author>eggsmediumrare</author><text>This happens because execs are cheap, farm out everything to dev shops, and the beleaguered, underqualified devs power out nonsense code to keep up with the arbitrary point quota for the sprint. No one knows how the whole system works, reqs change constantly so poorly-planned updates degrade the whole thing, and all the while actual patient data gets mixed into the big soupy pot of bullshit. Anyone who raises concerns about the situation gets to be the &amp;quot;compliance officer,&amp;quot; thus passing responsibility from the people benefitting from the situation to the people who just want to keep their job.&lt;p&gt;I wonder what would happen if devs could say to their boss &amp;quot;no, this won&amp;#x27;t be released until we&amp;#x27;re confident in it&amp;quot; with legally enforced immunity to consequences.</text></comment>