The Federal Trade Commission has found that the now-shuttered cancer testing company LabMD failed to adequately protect the personal information of nearly 10,000 patients, reversing an in-house judge’s decision in a closely watched data security case.

In an opinion written for the commission, FTC Chairwoman Edith Ramirez described LabMD’s data security practices as “unreasonable, lacking even basic precautions to protect the sensitive consumer information maintained on its computer system.”