<story><title>2.7M medical calls breached in Sweden</title><url>https://mobile.twitter.com/mikko/status/1097510234220826624?s=21</url></story><parent_chain></parent_chain><comment><author>Sverigevader</author><text>On my machine Google translate seems to &amp;quot;boot-loop&amp;quot; that site because of the cookie settings so I&amp;#x27;ll just do this:&lt;p&gt;Files were stored on a server using HTTPS but requiring no credentials. &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;188.92.248.19:443&amp;#x2F;medicall&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;188.92.248.19:443&amp;#x2F;medicall&amp;#x2F;&lt;/a&gt;
Part of the calls were saved as .mp3s with the customers phone number as file name.
CEO when confronted wouldn&amp;#x27;t believe it and hung up when the reporter asked if he could play one of the tapes.&lt;p&gt;The articles states that the server was a NAS (nas.applion.se).&lt;p&gt;All files have been available since 2013.&lt;p&gt;When calling 1177, there&amp;#x27;s no need to identify yourself with your personal identity number. You can if you want to if your medical history is of significance to your call.&lt;p&gt;Source: Am swede and this article... &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;computersweden.idg.se&amp;#x2F;2.2683&amp;#x2F;1.714787&amp;#x2F;inspelade-samtal-1177-vardguiden-oskyddade-internet&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;computersweden.idg.se&amp;#x2F;2.2683&amp;#x2F;1.714787&amp;#x2F;inspelade-samt...&lt;/a&gt;&lt;p&gt;And I want you guys to hear it from me before you hear it on the streets... I once called 1177 wanting to order a new pair of knees because one of mine hurt. The nurse who answered had a good laugh.</text></comment>
<story><title>2.7M medical calls breached in Sweden</title><url>https://mobile.twitter.com/mikko/status/1097510234220826624?s=21</url></story><parent_chain></parent_chain><comment><author>testplzignore</author><text>There are quite a few hosts responding on port 80 in the 188.92.248.0&amp;#x2F;21 subnet, including versions of httpd and php over a decade old. I wouldn&amp;#x27;t be surprised if there are more things unsecured. Yikes.</text></comment>