CRESTHUB
CRESTHUB MAGAZINE
  • NEWS
    Flutterwave debunks Alleged Reports of Hacked Accounts

    Flutterwave debunks Alleged Reports of Hacked Accounts

    WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa

    WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa

    Jumba raises $4.5 Million Pre-seed to Expand the supply of Construction materials in Kenya.

    Jumba raises $4.5 Million Pre-seed to Expand the supply of Construction materials in Kenya.

    Naked secures $17 Million Series B to Expand its Digital Insurance Company in Africa

    Naked secures $17 Million Series B to Expand its Digital Insurance Company in Africa

    PICTDA announces Resumption Date for Code Plateau Cohort

    PICTDA announces Resumption Date for Code Plateau Cohort

    Releaf secures $3.3 million Pre-series A funding to improve its Food Processing Technology

    Releaf secures $3.3 million Pre-series A funding to improve its Food Processing Technology

  • FEATURED
    Nigeria’s Cash Swap Policy: Goals versus Results

    Nigeria’s Cash Swap Policy: Goals versus Results

    Six Things that could Shape the Northern Nigerian Tech Ecosystem in 2023

    Six Things that could Shape the Northern Nigerian Tech Ecosystem in 2023

    5 Exciting Things That Happened in the Nigerian Tech Ecosystem

    5 Exciting Things That Happened in the Nigerian Tech Ecosystem

    SmallSmall to Expand to Jos following a $3 Million Seed Raise

    SmallSmall to Expand to Jos following a $3 Million Seed Raise

    The Increase in Data Prices is a Big Challenge for Remote Workers in Nigeria

    How Tobiloba Olusola is making Electronic Health Records Accessible to Patients

    How Tobiloba Olusola is making Electronic Health Records Accessible to Patients

  • BLOCKCHAIN
    Binance now accepts Naira Deposits and Withdrawals

    Binance now accepts Naira Deposits and Withdrawals

    Cardano Accelerator Adaverse Invests in Afriguild’s Mission to Onboard Africans Into Web3

    Cardano Accelerator Adaverse Invests in Afriguild’s Mission to Onboard Africans Into Web3

    Is Africa Ready to Operate a Digital Monetary Policy?

    Is Africa Ready to Operate a Digital Monetary Policy?

    What Binance and TikTok Star, Khaby Lame’s Partnership mean for Crypto and Web3 Adoption

    What Binance and TikTok Star, Khaby Lame’s Partnership mean for Crypto and Web3 Adoption

    PLA2SMART Set to Lead a New Frontier in Nigeria’s Tourism Economy

    Bundle Launches Web App to Give Users More Accessibility to Crypto

    Bundle Launches Web App to Give Users More Accessibility to Crypto

  • FINANCE
    CBN prohibits Foreign Banks from Offering Banking Services

    CBN prohibits Foreign Banks from Offering Banking Services

    Flutterwave adds Google Pay to its Payment Options for African Businesses

    Flutterwave adds Google Pay to its Payment Options for African Businesses

    After Receiving Switching and Processing Licence from CBN, Flutterwave includes eNaira to its Payment Options

    After Receiving Switching and Processing Licence from CBN, Flutterwave includes eNaira to its Payment Options

    Flutterwave gets Switching and Processing licence from CBN

    Flutterwave gets Switching and Processing licence from CBN

    Google Expands its Digital Wallet to South Africa

    Google Expands its Digital Wallet to South Africa

    FCCPC Orders Drawdown of Online Credit Companies

    FCCPC Orders Drawdown of Online Credit Companies

  • START UPS
    WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa

    WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa

    Naked secures $17 Million Series B to Expand its Digital Insurance Company in Africa

    Naked secures $17 Million Series B to Expand its Digital Insurance Company in Africa

    PressOne Africa raises $600,000 Pre-seed Funding to Support Entrepreneurs

    PressOne Africa raises $600,000 Pre-seed Funding to Support Entrepreneurs

    ThriveAgric selected West African Winners of the AYuTe Africa Challenge, receiving $1 million.

    ThriveAgric selected West African Winners of the AYuTe Africa Challenge, receiving $1 million.

    Yebo Fresh raises $4.5 million to Supply Fresh Food in South Africa

    Yebo Fresh raises $4.5 million to Supply Fresh Food in South Africa

    Sky.Garden survives Shutdown, gets New Owners

    Sky.Garden survives Shutdown, gets New Owners

  • PODCAST
CRESTHUB
  • NEWS
    Flutterwave debunks Alleged Reports of Hacked Accounts

    Flutterwave debunks Alleged Reports of Hacked Accounts

    WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa

    WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa

    Jumba raises $4.5 Million Pre-seed to Expand the supply of Construction materials in Kenya.

    Jumba raises $4.5 Million Pre-seed to Expand the supply of Construction materials in Kenya.

    Naked secures $17 Million Series B to Expand its Digital Insurance Company in Africa

    Naked secures $17 Million Series B to Expand its Digital Insurance Company in Africa

    PICTDA announces Resumption Date for Code Plateau Cohort

    PICTDA announces Resumption Date for Code Plateau Cohort

    Releaf secures $3.3 million Pre-series A funding to improve its Food Processing Technology

    Releaf secures $3.3 million Pre-series A funding to improve its Food Processing Technology

  • FEATURED
    Nigeria’s Cash Swap Policy: Goals versus Results

    Nigeria’s Cash Swap Policy: Goals versus Results

    Six Things that could Shape the Northern Nigerian Tech Ecosystem in 2023

    Six Things that could Shape the Northern Nigerian Tech Ecosystem in 2023

    5 Exciting Things That Happened in the Nigerian Tech Ecosystem

    5 Exciting Things That Happened in the Nigerian Tech Ecosystem

    SmallSmall to Expand to Jos following a $3 Million Seed Raise

    SmallSmall to Expand to Jos following a $3 Million Seed Raise

    The Increase in Data Prices is a Big Challenge for Remote Workers in Nigeria

    How Tobiloba Olusola is making Electronic Health Records Accessible to Patients

    How Tobiloba Olusola is making Electronic Health Records Accessible to Patients

  • BLOCKCHAIN
    Binance now accepts Naira Deposits and Withdrawals

    Binance now accepts Naira Deposits and Withdrawals

    Cardano Accelerator Adaverse Invests in Afriguild’s Mission to Onboard Africans Into Web3

    Cardano Accelerator Adaverse Invests in Afriguild’s Mission to Onboard Africans Into Web3

    Is Africa Ready to Operate a Digital Monetary Policy?

    Is Africa Ready to Operate a Digital Monetary Policy?

    What Binance and TikTok Star, Khaby Lame’s Partnership mean for Crypto and Web3 Adoption

    What Binance and TikTok Star, Khaby Lame’s Partnership mean for Crypto and Web3 Adoption

    PLA2SMART Set to Lead a New Frontier in Nigeria’s Tourism Economy

    Bundle Launches Web App to Give Users More Accessibility to Crypto

    Bundle Launches Web App to Give Users More Accessibility to Crypto

  • FINANCE
    CBN prohibits Foreign Banks from Offering Banking Services

    CBN prohibits Foreign Banks from Offering Banking Services

    Flutterwave adds Google Pay to its Payment Options for African Businesses

    Flutterwave adds Google Pay to its Payment Options for African Businesses

    After Receiving Switching and Processing Licence from CBN, Flutterwave includes eNaira to its Payment Options

    After Receiving Switching and Processing Licence from CBN, Flutterwave includes eNaira to its Payment Options

    Flutterwave gets Switching and Processing licence from CBN

    Flutterwave gets Switching and Processing licence from CBN

    Google Expands its Digital Wallet to South Africa

    Google Expands its Digital Wallet to South Africa

    FCCPC Orders Drawdown of Online Credit Companies

    FCCPC Orders Drawdown of Online Credit Companies

  • START UPS
    WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa

    WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa

    Naked secures $17 Million Series B to Expand its Digital Insurance Company in Africa

    Naked secures $17 Million Series B to Expand its Digital Insurance Company in Africa

    PressOne Africa raises $600,000 Pre-seed Funding to Support Entrepreneurs

    PressOne Africa raises $600,000 Pre-seed Funding to Support Entrepreneurs

    ThriveAgric selected West African Winners of the AYuTe Africa Challenge, receiving $1 million.

    ThriveAgric selected West African Winners of the AYuTe Africa Challenge, receiving $1 million.

    Yebo Fresh raises $4.5 million to Supply Fresh Food in South Africa

    Yebo Fresh raises $4.5 million to Supply Fresh Food in South Africa

    Sky.Garden survives Shutdown, gets New Owners

    Sky.Garden survives Shutdown, gets New Owners

  • PODCAST
No Result
View All Result
CRESTHUB
No Result
View All Result
Home HEALTH CARE

PLASCHEMA Accused of Healthcare Data Breach

by Nuel Umahi
July 26, 2022
in HEALTH CARE, Tech
Reading Time: 6 mins read
0
PLASCHEMA Accused of Healthcare Data Breach
Share on FacebookShare on Twitter

The news: Plateau State Contributory Health Care Management Agency (PLASCHEMA) – a Plateau state-led healthcare scheme has been accused of data breach which has exposed the personal data of citizens registered under it.

What you should know: According to reports by Website Planet, PLASCHEMA had 11 of its buckets (virtual containers that hold data) unprotected leaving innocent persons exposed to more cyber vulnerabilities because the information out there is a tool for cyber attackers.

Birth certificate of a registered applicant. Source: Website Planet

The buckets contained over 75,000 files totaling 45GB of data. In the insecure website, the full names of patients, dates of birth, height, sex, occupation, blood group, address, state, town/village, local government area, place of birth, parents’ full names, registration details, etc. were accessible to anyone surfing the web.

An ID card of a security officer. Source: Website Planet
An ID card of a registered applicant. Source: Website Planet

How secure is PLACHEMA’s cyber data?

The big question would be, “how secure is PLACHEMA’s cyber data?” because to have their buckets to be discovered by Website Planet means, the next person surfing the web would also have easy access without any security walls that holds encryption or password protection.

Furthermore to the reports, Website Planet stated that it has gone back and forth with the Nigerian Computer Emergency Response Team (CERT) in order to secure the buckets before malicious actors could infiltrate the space. However, this issue was not dealt with prompt action; leaving a wide window period of 2 months with about 12 contacts with CERT from the date the first query was filed on April 5th, 2022.

Reports from Website Planet

The PLASCHEMA DG was unavailable after we made several attempts to reach him. However during a radio interview at KT FM Jos, Dr. Fabong Jemchang Yildam debunked claims in regards to the exposure of data to the general public and further assured beneficiaries that their data is safe, secure and protected from external invasion.

The DG stated that the agency was in partnership with Plateau State Information And Communication Development Agency (PICTDA) and that if there was any breach, they would have been aware.

“Cybersecurity is a continuous process and no matter how good you are, you need to be changing the patterns, timing, time out to secure yourself and if by any reason or public goal they discovered that, PICTDA should be informed or PLASCHEMA should be informed”, he said. “PICTDA is the block on which PLASCHEMA has built an information and communication network”.

He further added that although there have been certain periodic setbacks and malicious attempts from third-party entry points, there has always been rapid response to ensure the data of the are protected.Dr. Yildam also denied being contacted by Website Planet as against the timeline of April that was claimed by the website reviewers.

“They (Website Planet) claim that they had alerted us in April and there is absolutely not enough evidence to show that we were either communicated or alerted. Our parent’s body PICTDA is not aware”, he said.

We Asked An Expert

In a chat with Ruth Ki – a data security expert, she disclosed that data security isn’t a priority within the state. Ms. Ki added that consequences to this breach could earn PLASCHEMA a lawsuit from the National InformationTechnology Development Agency (NITDA).

“If further research confirms that such confidential information was stored on the internet in plain words without any form of data encryption, the implication will be that they have exposed their beneficiaries to the danger of being victimized by cyber attackers”, she said. “The consequences of this careless act from the Agency can earn them a lawsuit for a data breach of data confidentiality by the victims or NITDA (National Information Technology Development Agency) because such activity is illegal in Nigeria”.

Also, Ki explained the difference between a compromised data and one which is lost. The data security expert explained that a compromised data involves a third-party access and that which is lost, can easily be retrieved and stored back.

“The Data has been compromised and not lost because the agency still has access to the information while we may assume that third parties who are not supposed to access such confidential data have access to them. PLASCHEMA might not be able to retrieve the data back but they can secure their site to avoid further compromise”, she said.

The use of data encryption and password authentication are two major means of securing valuable online databases. The use of both prevents data breaches from reoccurring. Also, cybersecurity sensitisation is needed to be taught and known from personal to organisational levels. This offers an edge to cybercrimes.

“Having tech skills is not enough to stay healthy on the space. I know developers whose confidential datas were breached because of a simple password security knowledge they lacked. We need a lot of sensitization. From personal to organisational levels, we need to understand how the web works and best we can stay healthy on it”, Ki said.

Related

Tags: PLASCHEMA
Previous Post

Startup Grind Jos to Host Mid-Year Summer Party

Next Post

The World Wide Web: 31 Years of Evolution

Next Post

The World Wide Web: 31 Years of Evolution

Youtube Music unveils Foundry Class of 2022

Youtube Music unveils Foundry Class of 2022

No Result
View All Result

CRESTHUB MAGAZINE

Popular Posts

  • The Impact of E-commerce in Strengthening the Supply and Distribution Chain of Nigerian Businesses
  • Flutterwave debunks Alleged Reports of Hacked Accounts
  • Nigeria’s Cash Swap Policy: Goals versus Results
  • WorkPay raises $2.7million Pre-series A Funding to Expand its Services across Africa
  • Jumba raises $4.5 Million Pre-seed to Expand the supply of Construction materials in Kenya.

Cresthub

Learn, Start and Grow your Business with Innovative Business Solutions at Cresthub.

Company

  • About Us
  • Contact Us
  • Advertise With Us
  • Privacy Policy

Products

  • Cresthub Magazine
  • Cresthub Podcast
  • Cresthub Insight

Socials

Facebook Twitter Youtube
  • About Us
  • Contact Us
  • Advertise With Us
  • Privacy Policy

© 2022 Cresthub Media

No Result
View All Result
  • NEWS
  • FEATURED
  • BLOCKCHAIN
  • FINANCE
  • START UPS
  • PODCAST

© 2022 Cresthub Media

Cresthub newsletter
THE WEEKLY ROUND UP

Join our newsletter to get first hand insight in tech and start up happenings in Nigeria and Africa at large.

Enter your email address
 

Loading Comments...
 

You must be logged in to post a comment.