A Florida medical marijuana dispensary took down its website after being notified that customer information was viewable through the site’s search function.
The medical marijuana dispensary website AltMed, which also operates under the name MüV, said Sunday on its Facebook page a customer had noticed that on www.altmedflorida.com it was possible to view customer information by just using the site’s search.
“Within 10 minutes, our Information technology staff removed the search engine function. We then retained Kroll, Inc. an industry leader in data risk and security,” the company said.
The site was taken, and remains, offline as a precaution and all sections of the site that contain customer data were unpublished. At this time the company has not released what type of information may have been exposed.
“Based on the forensic review thus far it appears that there was limited access to the site with limited information accessed. The review will continue until we fully understand what happened and who is responsible,” the company said.
MüV will contact any customer whose data was involved in the breach.