A medical software company’s database containing the personal information of more than 3.1 million patients was left exposed online without the need for a password or other authorization, according to ...