DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

UK: Bungling West Midlands medics lose 12,000 private patient records

Posted on September 5, 2010 by Dissent

Jonny Greatrex reports:

Bungling Midland medics have lost the personal records of nearly 12,000 NHS patients in just eight months, the Sunday Mercury can reveal.

The incredible data loss includes the confidential files of 10,000 people – taken after criminals stole a server from a dental practice.

Other incidents saw more than 170 private patient details emailed to an insurance company by mistake. But it is not just those using the NHS who are at risk of having sensitive information about them passed on. Last year a hospital worker was suspended after it was discovered he had sent a file containing payslip details for EVERY member of staff to his home e-mail account.

[…]

In total, 18,848 separate pieces of confidential data were lost in the West Midlands NHS. Of these 11,799 were related to patients, with the rest being staff information.

Read more in the Sunday Mercury.

The article notes that details of all the incidents are published on the NHS West Midlands website. They are, but the reports take some time to find. Jump to this page and scroll down to the most recent report. As the trust notes, for the first quarter of 2010:

24 incidents were reported to NHS West Midlands involving the loss or theft of patient information from Trusts and these are detailed below. These data losses should be seen in the context of the vast range and scope of NHS activity in the West Midlands. For example across this region from 1 January – 31 March 2010 approximately:

  • 456,000 people attended Accident and Emergency Departments
  • Over 8 million people will have visited their GP
  • Nearly 14 million will have been in contact with some part of the NHS

There are approximately 130,000 NHS staff in the West Midlands and for the vast majority of time they use sensitive data every day and keep it safely protected.

The report that follows covers incidents going back to June 2009, as described in the newspaper account.


Related:

  • Paying cyberattackers is wrong, right? Should Taos County's incident be an exception?
  • HHS OCR Settles HIPAA Ransomware Investigation with Syracuse ASC for $250k plus corrective action plan
  • Two more entities have folded after ransomware attacks
  • Data breach feared after cyberattack on AMEOS hospitals in Germany
  • Premier Health Partners issues a press release about a breach two years ago. Why was this needed now?
  • Theft from Glasgow’s Queen Elizabeth University Hospital sparks probe
Category: Health Data

Post navigation

← Imprisoned “Greenpoint Crew” member hit with new ID theft charges
Another lawsuit challenges ObamaCare on privacy grounds →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
  • Hacker group “Silent Crow” claims responsibility for cyberattack on Russia’s Aeroflot
  • AIIMS ORBO Portal Vulnerability Exposing Sensitive Organ Donor Data Discovered by Researcher
  • Two Data Breaches in Three Years: McKenzie Health
  • Scattered Spider is running a VMware ESXi hacking spree
  • BreachForums — the one that went offline in April — reappears with a new founder/owner
  • Fans React After NASCAR Confirms Ransomware Breach
  • Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack (1)
  • Infinite Services notifying employees and patients of limited ransomware attack
  • The safe place for women to talk wasn’t so safe: hackers leak 13,000 user photos and IDs from the Tea app

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Congress tries to outlaw AI that jacks up prices based on what it knows about you
  • Microsoft’s controversial Recall feature is now blocked by Brave and AdGuard
  • Trump Administration Issues AI Action Plan and Series of AI Executive Orders
  • Indonesia asked to reassess data privacy terms in new U.S. trade deal
  • Meta Denies Tracking Menstrual Data in Flo Health Privacy Trial
  • Wikipedia seeks to shield contributors from UK law targeting online anonymity
  • British government reportedlu set to back down on secret iCloud backdoor after US pressure

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.