SquareML's read-only analytics credential sat online for fourteen months before anyone revoked it.
A healthcare billing vendor says 3.8 million people's records were taken from its data center.