<p style="text-align: justify;"><img class="alignnone size-full wp-image-25417" src="https://ancient.cybermaterial.com/wp-content/uploads/2021/12/Blog_Images_Alerts_Incidents176.png" alt="" width="800" height="512" /></p> Telehealth platform Doxy.me is fixing an issue that allowed three third-party firms to access the names of some patients’ providers, the company told CyberScoop after it notified the company of the problem. The company, which <a href="https://www.bloomberglinea.com/2021/12/08/doxyme-a-free-telemedicine-platform-rides-pandemic-wave-and-expands-to-latam/" target="_blank" rel="noopener">self-reports as holding 30% of the growing U.S. telemedicine market</a> and is currently used by over 1 million providers worldwide, appeared to also be sharing IP addresses and unique device identification numbers with Google, Facebook and the marketing software company HubSpot, privacy researcher Zach Edwards found after examining the platform. The sensitive user data was accessible when patients clicked on a link to the platform’s “virtual waiting room” service, which connects patients with medical professionals. Providers can choose the name of their waiting room, which is often their name or the name of their medical practice. It appears that Doxy.me tried to take some measures to strip the doctor name from URLs sent to third parties, Edwards said, but the three companies used specific technical loopholes to access the full URL, which contained the doctor names. No patient health data was exposed. <p style="text-align: justify;"><a class="btn btn-default" href="https://www.cyberscoop.com/doxy-me-data-leak-facebook-google/" target="_blank" rel="noopener">READ FULL ARTICLE</a></p>