What Is This About?

If you recently received a letter or an email from Ohio Medical Alliance LLC d/b/a Ohio Marijuana Card concerning a data breach, you may be entitled to compensation. It was recently discovered that a database owned by Ohio Marijuana Card was publicly available for viewing, having been left unencrypted and non-password protected. This lack of security may have compromised the sensitive personal and protected health information of hundreds of thousands of individuals.

What Happened?

In August 2025, a cybersecurity researcher discovered that an unencrypted and non-password-protected database belonging to Ohio Marijuana Card was publicly accessible. The exposed database contained approximately 957,434 records totaling 323 GB of sensitive information. A review of the files showed high-resolution identification documents, patient intake forms, medical records, release forms, Social Security numbers, physician certification forms, and mental health evaluations. These medical records revealed patient diagnoses and the reasons individuals sought medical marijuana treatment. The database was restricted from public access after the researcher reported the issue. However, Ohio Marijuana Card has not publicly acknowledged the exposure or confirmed whether the incident constituted a data breach. It is not known how long the database was exposed or whether unauthorized individuals accessed the records.

What Information Was Impacted?

The following types of information may have been compromised:
  • Names;
  • Physical Addresses;
  • Dates of Birth;
  • Driver’s License Numbers;
  • Social Security Numbers;
  • Medical Records;
  • Mental Health Evaluations;
  • Physician Certification Forms;
  • Intake Forms;
  • Release Forms; and
  • Identification Documents.
 

What Action Can You Take?

My Data Breach Attorney is investigating whether affected users are entitled to compensation. If you received a notice from Ohio Medical Alliance LLC d/b/a Ohio Marijuana Card there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.

About Ohio Medical Alliance LLC d/b/a Ohio Marijuana Card

Ohio Medical Alliance LLC, who does business as Ohio Marijuana Card, is based in Broadview Heights, Ohio. Ohio Marijuana Card purportedly helps patients obtain physician-certified medical marijuana cards. The company operates clinics across Ohio and in several other states.

About

My Data Breach Attorney

Backed by the nationally recognized law firm Levi & Korsinsky, we combine decades of legal expertise with an unwavering focus on consumer advocacy. Levi & Korsinsky is a nationally recognized consumer advocacy law firm that has recovered hundreds of millions of dollars against the largest of corporations. The firm is a 100% contingency firm – we don't get paid unless you get paid! Prior results do not guarantee similar outcomes.

Frequently Asked Questions

Know Your Legal Rights After a Data Breach Incident

A data breach occurs when sensitive, confidential, or protected information is accessed, disclosed, or stolen without authorization. This may include personal data, financial information, medical information, or business secrets.

Our firm provides the following services:

  • Investigating the breach and determining liability.
  • Filing lawsuits or claims against negligent companies.
  • Helping recover financial damages.
  • Advising on legal steps to protect your rights.

As a consumer, you have the right to:

  • Be notified of the breach under U.S. laws, such as the California Consumer Privacy Act (CCPA) or General Data Protection Regulation (GDPR) if applicable.
  • Seek compensation for financial or reputational harm.
  • Take legal action against the entity responsible for negligence.

Depending on the case, you may be entitled to:

  • Reimbursement for financial losses (e.g., identity theft).
  • Compensation for emotional distress or loss of privacy.
  • Punitive damages if negligence is proven.

Yes, time is critical. If you suspect your data has been compromised:

  • Secure your accounts by changing passwords.
  • Monitor your credit reports for unusual activity.
  • Contact a law firm to explore legal options for compensation.

Our firm works on a contingency fee basis, meaning you pay nothing upfront. We only get paid if we recover compensation for you.

Take Action. Choose My Data Breach Attorney