Charges are still hanging over the head of a nurse accused of accessing over 5,800 patients’ information improperly over a period of years. I had previously noted the incident on this blog in 2011 when it was first made public. Now it seems like it will be June before we know whether she will be…
Month: March 2013
SCDOR wins one in court
More good news for the state of South Carolina: a judge has dismissed a lawsuit against them filed by former state Sen. John Hawkins over their massive hack in 2011. Although the ruling is not yet available online, Meg Kinnard of Associated Press reports: In an order obtained by The Associated Press, Circuit Judge G. Thomas…
When – if ever – is notification delayed, notification denied?
Most people I know want law enforcement to investigate some breaches and realize that, sometimes, that results delaying notification of those affected by a breach. But when does delay in notification become unreasonable or too long? Charles Sweeney reports that Samaritan Hospital in Troy, New York delayed notification from November 2011 – when it determined…
South Miami Hospital employee stole patients' info for tax refund fraud scheme
Yes, let’s wait until Friday late in the day to disclose another insider breach at a Florida hospital for tax refund fraud. At this rate, we may have to retire the headline “Florida hospital employee steals patient info for tax refund fraud.” Local10 reports: Baptist Health says its privacy office has recently learned that a…
MVS comunicaciones Hacked, 1,700+ Credentials leaked
A Mexican based Telecommunications company who runs various sub company’s has been breached and as a result the credentials of its administration and service users have been leaked. The company is MVS Comunicaciones (https://www.mvs.com) runs pay television services and is based in mexico. > MVS Comunicaciones (MVS) is a Mexicanmedia conglomerate. The company owns MASTV, MVS Radio operator of four national radio networks, MVS Televisión operator and…
Belgian Privacy Commission issues new recommendation on data security and breaches
Julien Hick, Jacqueline van Essen and Vincent Wellens of NautaDutilh write: Belgium recently experienced two significant data breaches (involving, amongst other companies, the Belgian railway operator), which resulted in the online disclosure of personal data relating to thousands of people. These events led the Belgian data protection authority (the Privacy Commission) to issue a recommendation on the security…