DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

UK: Bungling West Midlands medics lose 12,000 private patient records

Posted on September 5, 2010 by Dissent

Jonny Greatrex reports:

Bungling Midland medics have lost the personal records of nearly 12,000 NHS patients in just eight months, the Sunday Mercury can reveal.

The incredible data loss includes the confidential files of 10,000 people – taken after criminals stole a server from a dental practice.

Other incidents saw more than 170 private patient details emailed to an insurance company by mistake. But it is not just those using the NHS who are at risk of having sensitive information about them passed on. Last year a hospital worker was suspended after it was discovered he had sent a file containing payslip details for EVERY member of staff to his home e-mail account.

[…]

In total, 18,848 separate pieces of confidential data were lost in the West Midlands NHS. Of these 11,799 were related to patients, with the rest being staff information.

Read more in the Sunday Mercury.

The article notes that details of all the incidents are published on the NHS West Midlands website. They are, but the reports take some time to find. Jump to this page and scroll down to the most recent report. As the trust notes, for the first quarter of 2010:

24 incidents were reported to NHS West Midlands involving the loss or theft of patient information from Trusts and these are detailed below. These data losses should be seen in the context of the vast range and scope of NHS activity in the West Midlands. For example across this region from 1 January – 31 March 2010 approximately:

  • 456,000 people attended Accident and Emergency Departments
  • Over 8 million people will have visited their GP
  • Nearly 14 million will have been in contact with some part of the NHS

There are approximately 130,000 NHS staff in the West Midlands and for the vast majority of time they use sensitive data every day and keep it safely protected.

The report that follows covers incidents going back to June 2009, as described in the newspaper account.


Related:

  • Paying cyberattackers is wrong, right? Should Taos County's incident be an exception?
  • HHS OCR Settles HIPAA Ransomware Investigation with Syracuse ASC for $250k plus corrective action plan
  • Two more entities have folded after ransomware attacks
  • Data breach feared after cyberattack on AMEOS hospitals in Germany
  • Premier Health Partners issues a press release about a breach two years ago. Why was this needed now?
  • Theft from Glasgow’s Queen Elizabeth University Hospital sparks probe
Category: Health Data

Post navigation

← Imprisoned “Greenpoint Crew” member hit with new ID theft charges
Another lawsuit challenges ObamaCare on privacy grounds →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Justice Department Announces Coordinated Disruption Actions Against BlackSuit (Royal) Ransomware Operations
  • NL: Hackers breach cancer screening data of almost 500,000 women
  • Violent Crypto Crimes Surge in 2025 Amid Massive Data Leaks
  • Why Ransomware Attacks Are Decreasing in 2025
  • KR: Yes24, the largest Internet bookstore in Korea, suffered its second ransomware attack in two months
  • Korea wins world’s top hacking contest for 4th consecutive year
  • 7-Zip Vulnerability Lets Hackers Write Files and Run Malicious Code
  • Connex Credit Union notifies 172,000 members of hacking incident
  • Federal judiciary says it is boosting security after cyberattack; researcher finds new leaks (CORRECTED)
  • Bank of America Refused To Reimburse Georgia Customer After Hackers Hit Account. Then a News Station Showed Up.

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Navigating Privacy Gaps and New Legal Requirements for Companies Processing Genetic Data
  • Germany’s top court holds that police can only use spyware to investigate serious crimes
  • Flightradar24 receives reprimand for violating aircraft data privacy rights
  • Nebraska Attorney General Sues GM and OnStar Over Alleged Privacy Violations
  • Federal Court Allows Privacy Related Claims to Proceed in a Proposed Class Action Lawsuit Against Motorola
  • Italian Garante Adopts Statement on Health Data and AI
  • Trump administration is launching a new private health tracking system with Big Tech’s help

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.
Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report