The data of 33,420 patients of BJC HealthCare was left exposed to the internet for eight months after the St. Louis-based provider misconfigured one of its servers.
BJC is one of the largest nonprofit healthcare systems in the U.S., which includes 15 hospitals.

http://www.healthcareitnews.com/news/medical-data-33000-bjc-healthcare-patients-exposed-online-8-months