A cyber security researcher discovered an unprotected online database of medical cannabis records. Now the State Medical Board of Ohio is investigating.