InfoSecBulletin Cybersecurity for mankind
Archer Health, a US provider of in-home and palliative care, left an unsecured database online, exposing sensitive personal and health information to anyone who could find it, experts say. Cybersecurity researcher Jeremiah Fowler alerted WebsitePlanet after discovering the database and assisting in securing it.
Fowler discovered an unprotected database with about 145,000 files, including PDFs and PNGs. It contained documents like assessments, home health certifications, care plans, and discharge forms.
Ransomware Crisis in 2026: 5,064 Organizations Affected in 135 Countries
Palo Alto Networks Addresses 13 Vulnerabilities
Critical Dell BIOS & Zimbra Flaws Expose Enterprise Systems
CoLoCity Launches New 1.0 MW Data Center Facility at Gulshan
Daily Cyber security update for 10. 07. 2026
How Hacker Compromise AWS Cloud Environment Using AI in 72 Hours
Mycelium Framework: First AI-as-a-Service Botnet
CrowdStrike Shows 5 New Prompt Injection Techniques for AI Agents
Critical GCP Dialogflow Vulnerability Allows Malicious Code Injection
CIRT identified 153 publicly exposed FortiGate devices in Bangladesh
Locking the database down:
These files, totaling 23GB, included names, patient IDs, SSNs, addresses, phone numbers, and other personal information. They also contained diagnoses and treatment details.
Archer Health, or Archer Home Health, offers in-home medical services including skilled nursing, therapy, nutritional guidance, social work, home health aides, and wound care.
They offer palliative care that emphasizes symptom relief, managing the disease, comfort, and support for those with serious or chronic illnesses.
After Fowler contacted them, the company secured the database and thanked him for the alert.
“Thank you for bringing this to our attention,” Archer Health told Fowler. “We take data security and patient privacy very seriously. Our team is actively investigating this matter and will address any security issues promptly.”
Unless a forensic analysis is conducted, we cannot determine if the database was accessed prior to Fowler finding it. There is no proof that the database was leaked on the dark web. Additionally, we are unsure how long the archive was open or who operated it, whether it was Archer Health or someone else.
