Pot shops in legal states are compiling databases with their compliance CRM systems.

Pot industry needs to anonymize their customer records or stop using SaaS packaged solutions.

Now if China hacks Meadows or something, they have customer and purchase lists which may include security cleared personnel who can now be blackmailed.

If you run a pot shop, or an SaaS solution for them like Meadows, you really have to figure out how to divorce customer PII from purchases.

I am back to the black market in Oregon for this reason!