A major data breach has exposed nearly one million records tied to Ohio Marijuana Card, a company that helps patients secure physician-certified medical marijuana cards through telehealth and in-person clinics across several states.
The incident, impacting 957,434 records, was first discovered on July 14, 2025, by cybersecurity researcher Jeremiah Fowler, and was announced today via a press release by the law firm Schubert Jonckheer & Kolbe LLP.
According to his findings, databases belonging to Ohio Medical Alliance, LLC—the parent company of Ohio Marijuana Card—were left unprotected and unencrypted, leaving sensitive patient and employee information vulnerable.
The exposed databases reportedly contained 210,620 email addresses as well as highly sensitive personal details. These included images of driver’s licenses and other identification documents showing names, addresses, birth dates, and license numbers. Also included were medical records, release forms, physician certification documents with Social Security numbers, and mental health evaluations. Identification data spanned multiple states, widening the scope of the breach beyond Ohio.
Schubert Jonckheer & Kolbe LLP, a San Francisco-based law firm, has launched an investigation into the breach. The firm says those impacted could face significant risks, including identity theft and privacy violations, and may be entitled to financial compensation as well as court-ordered improvements to the company’s cybersecurity practices.
The firm says “If you received notification of this data breach or are affiliated with Ohio Marijuana Card and wish to obtain additional information about your legal rights, please contact us today or visit our website at https://www.classactionlawyers.com/ohiomedicalalliance.”
Ohio Marijuana Card operates in Ohio, Arkansas, Kentucky, Louisiana, Virginia, and West Virginia. Patients and employees who received a notification regarding the breach, or who believe their information may have been compromised, are being advised to seek information about their legal rights.






