ESHYFT Data Breach?

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of a recent report that ESHYFT may have exposed users' data.

As part of their investigation, they need to hear from individuals who used the ESHYFT app and believe their data may have been impacted.

Cybersecurity researcher Jeremiah Fowler recently reported discovering an unsecured database belonging to ESHYFT, a New Jersey-based company that operates an app connecting healthcare facilities to healthcare workers, including certified nursing assistants, licensed practical nurses and registered nurses. The exposed database, which was not password protected or encrypted, reportedly contained over 86,000 records, totaling 108.8 GB. 

According to Fowler, the records included personal information such as profile images, work schedule logs, professional certificates, resumes and CVs, medical documents, and identification documents including driver's licenses and Social Security cards. A spreadsheet with over 800,000 entries reportedly detailed nurses' internal IDs, facility names, shift details and more.

Fowler said he notified the company upon discovering the potential ESHYFT data breach, and the database was secured over a month later. It remains unknown how long the database was accessible and whether anyone else accessed the data during its exposure, Fowler wrote.

If you used ESHYFT and believe your information may have been exposed, attorneys want to hear from you. In the event of a data breach, you may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force ESHYFT to ensure it takes proper steps to protect the information it was entrusted with.