Dental practice software maker fixes bug that exposed patients’ medical records

Practice by Numbers patched a patient portal flaw that let logged-in users change document numbers in the URL and view other patients’ dental files.

The company said fewer than 10 patients were affected and briefly took the portal offline to fix the issue.

The exposed documents included sensitive health and identity records, raising privacy concerns for patients and dental practices.

The case highlights how access-control bugs in medical software can put protected information at risk and underscores weak vulnerability-reporting channels.