Ohio Marijuana Card Data Breach Investigation
A recent investigation by Schubert Jonckheer & Kolbe LLP has uncovered a major data breach involving the Ohio Medical Alliance, LLC, which operates under the name Ohio Marijuana Card. This breach has alarmingly compromised the personal information of approximately 957,434 individuals. As Ohio Marijuana Card helps clients obtain physician-certified medical marijuana cards through both telemedicine and in-person services across several states including Ohio, Arkansas, Kentucky, Louisiana, Virginia, and West Virginia, the implications of this breach are significant.
On July 14, 2025, cybersecurity expert Jeremiah Fowler revealed that he had discovered multiple databases related to Ohio Marijuana Card that were shockingly unprotected; they lacked both password safeguards and encryption. Among the data exposed were 210,620 email addresses linked to clients, employees, and business partners. More concerning, the databases contained sensitive personal information—including images of driver's licenses and other identification forms that showcased names, addresses, birth dates, and license numbers. Further, there were medical records, release and physician certification forms displaying Social Security numbers, mental health evaluations, and identification documents from various states.
For those affected, there are serious risks hovering over their financial identities due to the breadth of information that has been exposed. Victims may face identity theft, which can have profound effects on their personal and financial wellbeing. The law firm, Schubert Jonckheer & Kolbe LLP, has urged individuals who have received notifications regarding this data breach or who have ties with Ohio Marijuana Card to seek legal counsel. They could potentially be entitled to compensation for damages and may also see injunctions requiring the organization to bolster its cybersecurity practices.
The breach highlights ongoing vulnerabilities faced by organizations, especially those managing sensitive personal data. As technology evolves, so do the tactics of cybercriminals; thus, it is incumbent upon companies, particularly those in the healthcare and consumer services sectors, to adopt stringent cybersecurity measures to protect client data from unauthorized access.
Moreover, this incident serves as a wake-up call for consumers as well. Being proactive about personal data security is paramount in the wake of such breaches. Individuals should routinely monitor their financial accounts and consider leveraging credit monitoring services if they believe their data may be compromised.
As investigations continue, Ohio Marijuana Card must address these security deficiencies, and transparency with their clients will be crucial in restoring faith after this alarming event. Public trust hinges on how well organizations respond to breaches and implement necessary safeguards to prevent future occurrences. The implications of this breach extend beyond immediate concerns; they punctuate the essential nature of comprehensive data protection in today’s digital era.
For more information or to find out about your legal rights regarding this data breach, contact Schubert Jonckheer & Kolbe LLP or visit their website at
classactionlawyers.com. Should this data breach affect you, acting promptly is crucial to protecting your identity and taking advantage of any potential compensation that may be available.
Schubert Jonckheer & Kolbe LLP is based in San Francisco and has a track record of representing shareholders, employees, and consumers in class actions against corporate entities. Leveraging co-counsel, they litigate cases nationwide.