{"id":3565,"date":"2021-09-13T16:09:55","date_gmt":"2021-09-13T20:09:55","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3565"},"modified":"2021-09-13T16:09:55","modified_gmt":"2021-09-13T20:09:55","slug":"gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/","title":{"rendered":"GetHealth Platform Misconfiguration Exposes 61 Million Fitness-Tracking Records"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2994\" src=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\" alt=\"GetHealth Platform Misconfiguration Exposes 61 Million Fitness-Tracking Records\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg 800w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod-300x150.jpg 300w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod-768x384.jpg 768w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod-540x270.jpg 540w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod-162x81.jpg 162w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod-360x180.jpg 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><b><i>GetHealth, a health and wellness data unification solution provider, exposed 61 million fitness-tracking records due to a platform misconfiguration.\u00a0<\/i><\/b><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The data related to wearable technology and fitness services and platforms, such as Fitbit, Misfit Wearables, Microsoft Band, Strava, and Google Fit. The GetHealth platform misconfiguration was discovered by WebsitePlanet and cybersecurity researcher Jeremiah Fowler; the database was not password protected. The data contained within included names, dates of birth, weight, height, gender, and GPS logs.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\"><br \/>Widget not in any sidebars<br \/><\/span><\/p>\n<h2 style=\"text-align: justify\"><b>Expert Commentary: GetHealth Platform Misconfiguration\u00a0<\/b><\/h2>\n<h3 style=\"text-align: justify\"><b>Tim Erlin<\/b><\/h3>\n<p style=\"text-align: justify\"><i><span style=\"font-weight: 400\">Tim Erlin is VP of Strategy at <\/span><\/i><a href=\"https:\/\/www.tripwire.com\/\" target=\"_blank\" rel=\"noopener\"><i><span style=\"font-weight: 400\">Tripwire<\/span><\/i><\/a><i><span style=\"font-weight: 400\">.<\/span><\/i><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cMisconfigurations, such as a database without a password, allow attackers easy access to your systems or data. It\u2019s the equivalent of leaving your door unlocked or window open.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">All organization should regularly audit their systems for misconfigurations, especially those systems that are accessible to the Internet. Even if you\u2019ve deployed systems with a secure configuration to start, a simple change can give attackers access.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Misconfigured systems aren\u2019t just at risk from attackers, but they often pose a compliance risk as well. Compliance audits can result in fines and other consequences that have a material impact on your business. It may be complex, but understanding which regulations apply to which parts of your environment is a foundational requirement for doing business in today\u2019s data-driven, connected world.\u201d<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Erich Kron<\/b><\/h3>\n<p style=\"text-align: justify\"><i><span style=\"font-weight: 400\">Erich Kron is a Security Awareness Advocate at <\/span><\/i><a href=\"https:\/\/www.knowbe4.com\/\" target=\"_blank\" rel=\"noopener\"><i><span style=\"font-weight: 400\">KnowBe4<\/span><\/i><\/a><i><span style=\"font-weight: 400\">.<\/span><\/i><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cThis data breach, while seeming to be somewhat benign due to the lack of social security numbers or credit card info, actually contains a significant amount of information that could be useful for criminals. The fact that this information, which includes GPS logs of individuals, is the kind of information that will cause a collective groan of pain from executive protection teams and physical security practitioners alike. This information makes it much easier for bad actors to locate where people are living or staying, and can expose patterns of travel.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Whenever an organization collects data on individuals, it is critically important that the processes are in place to ensure that information is not left unsecured. The data should also be encrypted to protect it from prying eyes in the event there is an issue.\u201d<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Josh Rickard<\/b><\/h3>\n<p style=\"text-align: justify\"><i><span style=\"font-weight: 400\">Josh Rickard is Security Solutions Architect at <\/span><\/i><a href=\"https:\/\/swimlane.com\/\" target=\"_blank\" rel=\"noopener\"><i><span style=\"font-weight: 400\">Swimlane<\/span><\/i><\/a><i><span style=\"font-weight: 400\">.<\/span><\/i><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cPlatform misconfigurations, like those in the GetHealth database, can have long-standing and upsetting repercussions, even after exposed records have been restricted from public access. In this case, 61 million records containing personally identifiable information (PII)&#8211;such as names, birthdates, gender, and personal health information&#8211;have been exposed to the public and violated victims\u2019 privacy.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Although data exposures such as the GetHealth exposure are becoming increasingly frequent, organizations can prevent similar situations and protect valuable human data by centralizing and automating their current security threat detection, response, and investigation processes into a single platform. The implementation of a SOAR solution allows for real-time security automation to respond to incidents and execute the appropriate security-related tasks. With comprehensive security automation, the chance for human error is eliminated and customers remain protected.\u201d<\/span><\/p>\n<p style=\"text-align: justify\"><em>Thanks to the experts for their thoughts on the GetHealth Platform Misconfiguration. For more, check out the <a href=\"https:\/\/solutionsreview.com\/security-information-event-management\/siem-buyers-guide-security-information-and-event-management\/\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline\">SIEM Buyer\u2019s Guide<\/span><\/a>.\u00a0<\/em><\/p>\n<p><span style=\"font-weight: 400\"><br \/>Widget not in any sidebars<br \/><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>GetHealth, a health and wellness data unification solution provider, exposed 61 million fitness-tracking records due to a platform misconfiguration.\u00a0 The data related to wearable technology and fitness services and platforms, such as Fitbit, Misfit Wearables, Microsoft Band, Strava, and Google Fit. The GetHealth platform misconfiguration was discovered by WebsitePlanet and cybersecurity researcher Jeremiah Fowler; the [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":2994,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[353,95,1649,86,1289,1650,21,57,22,1197,1311],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>GetHealth Platform Misconfiguration Exposes 61 Million Records<\/title>\n<meta name=\"description\" content=\"GetHealth, a health and wellness data unification solution provider, exposed 61 million records due to a platform misconfiguration.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GetHealth Platform Misconfiguration Exposes 61 Million Records\" \/>\n<meta property=\"og:description\" content=\"GetHealth, a health and wellness data unification solution provider, exposed 61 million records due to a platform misconfiguration.\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools &amp; Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-13T20:09:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/\",\"name\":\"GetHealth Platform Misconfiguration Exposes 61 Million Records\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\",\"datePublished\":\"2021-09-13T20:09:55+00:00\",\"dateModified\":\"2021-09-13T20:09:55+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"GetHealth, a health and wellness data unification solution provider, exposed 61 million records due to a platform misconfiguration.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"GetHealth Platform Misconfiguration Exposes 61 Million Fitness-Tracking Records\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GetHealth Platform Misconfiguration Exposes 61 Million Fitness-Tracking Records\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools &amp; Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics &amp; SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GetHealth Platform Misconfiguration Exposes 61 Million Records","description":"GetHealth, a health and wellness data unification solution provider, exposed 61 million records due to a platform misconfiguration.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/","og_locale":"en_US","og_type":"article","og_title":"GetHealth Platform Misconfiguration Exposes 61 Million Records","og_description":"GetHealth, a health and wellness data unification solution provider, exposed 61 million records due to a platform misconfiguration.\u00a0","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/","og_site_name":"SIEM Tools &amp; Security Event Management | Solutions Review","article_published_time":"2021-09-13T20:09:55+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/","name":"GetHealth Platform Misconfiguration Exposes 61 Million Records","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg","datePublished":"2021-09-13T20:09:55+00:00","dateModified":"2021-09-13T20:09:55+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"GetHealth, a health and wellness data unification solution provider, exposed 61 million records due to a platform misconfiguration.\u00a0","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg","width":800,"height":400,"caption":"GetHealth Platform Misconfiguration Exposes 61 Million Fitness-Tracking Records"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/gethealth-platform-misconfiguration-exposes-61-million-fitness-tracking-records\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"GetHealth Platform Misconfiguration Exposes 61 Million Fitness-Tracking Records"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools &amp; Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics &amp; SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3565"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3565"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3565\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2994"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}