NTreatment failed to add password protection to a cloud server, exposing thousands of sensitive medical records online. Source