Nevada accidentally leaks thousands of medical marijuana dispensary applications
The data includes their dates of birth, home addresses, citizenship, and driving license and social security numbers of the applicants.
Nevada’s state government website has leaked the personal data on over 11,700 applicants for dispensing medical marijuana in the state.
Each application, eight pages in length, includes the person’s full name, home address, citizenship, and even their weight and height, race, and eye and hair color. The applications also include the applicant’s citizenship, their driving license number (where applicable), and social security number.
We left a number of voicemails of applicants prior to publication. One dispensary based in Las Vegas, who did not want to be named, confirmed after we posted that their records were accurate.
But it’s not immediately clear how many years the applications date back.
Security researcher Justin Shafer found the bug in the state’s website portal, allowing anyone with the right web address to access and enumerate the thousands of applications.
READ MORE: Nevada accidentally leaks thousands of medical marijuana dispensary applications