Sixty-four healthcare service providers in the United States use the MyChart portal, allowing users to schedule medical appointments, request prescription refills, get in touch with their clinicians, and access other services. Unfortunately, even people who haven’t used Novant’s services may still have been exposed due to the tracker’s improper configuration. The exposure persisted for two years before Novant’s IT employees realized the mistake and removed Meta pixel from its sites and portal in May 2022. Novant identified all impacted individuals after the investigation that was completed on June 17, 2022, and only those who received notices may consider themselves victims of a breach. The healthcare company claims that after numerous attempts to contact Meta regarding the deletion of the healthcare data, no response has been received. A class action lawsuit was recently launched in the United States against Meta and two hospitals, claiming that the tech giant and its partners knew they were gathering private data through Meta Pixel without getting the user’s permission. Although the lawsuit named two healthcare service providers as defendants, the scenario encompassed numerous hospitals engaging in such illegal tracking practices.

https://www.bleepingcomputer.com/news/security/misconfigured-meta-pixel-exposed-healthcare-data-of-13m-patients/