Protesters wore paper bags over their heads and carried signs expressing outrage over security breaches in Colorado’s medical marijuana registry Wednesday. The protesters, roughly a dozen medical pot patients, are insisting that the Colorado Department of Health and Environment terminate the registry.

The state medical marijuana registry contains personal information from about 107,000 patients who can legally purchase cannabis at dispensaries.

The list is supposed to be kept confidential but a state audit from earlier in the summer showed that the health department shared the records with contractors and didn’t require confidentiality agreements.

In an attempt to assuage concerns over possible future breaches in security, the health department has agreed to “improve security.” However, protesters would rather see the list done away with.