A few mainstream media news organizations such as Arizona Republic and KPHO are reporting a breach involving Mountain Vista Medical Center in Mesa, AZ. A notice posted to the medical center’s site dated December 10 says:
On October 13, 2010, Mountain Vista Medical Center became aware that compact memory data cards containing information related to procedures occurring January 1, 2008 through October 12, 2010, were missing from two endoscopy machines in the Endoscopy Unit. The compact memory data cards include the following information about the patients: full name, date of birth, age, sex, hospital medical record number, physician last name, date and time of procedure, type of procedure, and procedure image(s). We have no reason to believe that the information involved in this incident has been accessed or improperly used.
Social security numbers, credit card numbers, addresses, and telephone numbers were not included on the data cards.
[…]
As of the time of this posting, the incident is not up on HHS’s breach reporting site, but I expect we’ll see it there by the end of this week.