DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

NYU Langone Medical Center Notifies Patients That Stolen Computer Contained Clinical Information

Posted on March 30, 2011 by Dissent

NYU Medical Center has posted the following breach notification on its web site, dated March 29, 2011:

NYU Langone Medical Center notified patients recently that a desktop computer was discovered stolen from an NYU School of Medicine Faculty Group Practice physician’s office on January 27, 2011. The computer contained correspondence with patients regarding their office visits but contained no financial information. A suspect has been arrested, although the computer has not been recovered.

The theft occurred on the fifth floor of Bellevue Hospital Center in an office used for research and not patient care. The computer contained correspondence regarding the office visits of 670 patients that occurred between April 4, 1999 and September 30, 2008.

NYU Langone was able to recreate the correspondence from the stolen desktop using encrypted network back-up files. All patients with current addresses have been notified of this issue by first class mail.

The majority of correspondence on the stolen computer (653 letters) included patient name, diagnosis, the results of diagnostic tests, and clinical information gathered during the patient’s visit to the physician’s office. An additional 26 letters may have included information such as medical record numbers, home address, date of birth, patient occupation, and, in only two instances, social security numbers.

At this time there is no indication that patient information stored on the stolen computer has been adversely used or disclosed. NYU Langone Medical Center is committed to protecting the privacy and security of our patients’ medical information, and since this incident, we have taken affirmative steps and additional security measures to ensure that thefts such as this do not occur again.

The NYU Langone Medical Center’s Office of Compliance has set up a dedicated telephone line to answer patient’s questions regarding this issue at 1-877-698-2333, Monday-Friday between the hours of 9:00 a.m. and 5:00 p.m.

Now that is a pretty terrific disclosure notice. Kudos to NYU for providing a clear description of the types of data involved and who might be affected. I’m just not sure I understand whether the computer was stolen on January 27 or just first discovered stolen on January 27..?

Updated May 4: According to NYU’s report to HHS, the theft occurred on January 27.


Related:

  • Global operation targets NoName057(16) pro-Russian cybercrime network in Operation Eastwood
  • More than 100 British government personnel exposed by Ministry of Defence data leak
  • New TeleMessage SGNL Flaw Is Actively Being Exploited by Attackers
  • North Country Healthcare responds to Stormous's claims of a breach
  • Gladney Adoption Center had serious data exposures in the past few months. What will they do to prevent more?
Category: Health Data

Post navigation

← MI: Man turns documents with personal information over to police
Clarksburg VA Medical Center patient list left in car for months, but not to worry, VA says →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Global operation targets NoName057(16) pro-Russian cybercrime network in Operation Eastwood
  • More than 100 British government personnel exposed by Ministry of Defence data leak
  • New TeleMessage SGNL Flaw Is Actively Being Exploited by Attackers
  • North Country Healthcare responds to Stormous’s claims of a breach
  • Gladney Adoption Center had serious data exposures in the past few months. What will they do to prevent more?
  • Former U.S. Soldier Pleads Guilty to Hacking and Extortion Scheme Involving Telecommunications Companies
  • DOGE Denizen Marko Elez Leaked API Key for xAI
  • Four people bailed after arrests over cyber attacks on M&S, Co-op and Harrods
  • RansomedVC is back — and is still attacking its competitors
  • Texas Enacts Electronic Health Record Data Localization Law

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Microsoft can’t protect French data from US government access
  • Texas Enacts Electronic Health Record Data Localization Law
  • Upstate NY county clerk again refuses to enforce Texas abortion judgment
  • Attorney General James Leads Coalition Urging Congress to Protect Americans from Masked ICE Agents
  • Attorney General Tong Announces $85,000 Settlement with TicketNetwork for Violations of the Connecticut Data Privacy Act​
  • Fourth Circuit upholds West Virginia ban on abortion pills
  • Meta fixes bug that could leak users’ AI prompts and generated content

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.