As an update to the report on a missing laptop containing information on patients at Ortho Montana, Ortho Montana did report the incident to HHS. In their notification, they indicated that 37,000 patients were notified of the December 17th incident. A statement on Ortho Montana’s site says: Recently, we learned that a laptop belonging…
Category: Health Data
Update to Green River District Health Department post
As an update to the blog entry about the Green River District Health Department breach, their breach report to the U.S. Dept. of Health and Human Services (HSS) indicates that 18,871 had their data exposed on the web, not the nine thousand figure reported in the media. GRDHD indicated that they first became aware…
Hacking incident at St. Louis University affects over 12,000 employees and 800 students receiving counseling services
St. Louis University in Missouri reports that its network was hacked and that personally identifiable and protected health information were on the servers that were accessed without authorization. A statement on their web site dated January 31 indicates that the breach occurred on December 12 and was discovered on the 13th. An investigation conducted by…
Docs withhold records from victims of medical ID theft
Unintended – and unwelcome – consequences of HIPAA? Isaac Wolf reports: Medical providers say that federal law hamstrings ID theft victims from seeing files created in their name: That’s because medical records created about all patients — including identity thieves who use your name – are covered by privacy rules in the Health Insurance Portability…
Health Net Delays Notification of Data Breach Involving 2 Million People
Okay, I’ve been known to be a bit harsh at times in commenting on breaches, but even I think this implied criticism in reporting by Brian T. Horowitz on eWeek is a bit too much: Insurer Health Net waited until March 14 to disclose a data breach discovered on Jan. 21 involving the loss of…
UK: Wolverhampton City Council breached Data Protection Act; Confidential records dumped in skip
From the ICO: Wolverhampton City Council breached the Data Protection Act by allowing confidential personal information to be disposed of in a skip, the Information Commissioner’s Office (ICO) said today. The ICO first became aware of the breach in October 2010 when a local newspaper reported that council documents containing names, dates of birth, bank…