One that I missed from OCR’s web site during my last update from that site: St. Joseph Heritage Healthcare State: California Approx. # of Individuals Affected: 22,012 Date of Breach: 3/06/10 Type of Breach: Theft Location of Breached Information: Desktop Computer Thanks to ITRC for pointing out my omission. As of the date of this…
Category: Health Data
(update) Hacker remains at large year after cyberattack on Va. data
A year after a computer hacker breached Virginia’s statewide prescription drug database, investigators still don’t know who did it. Computer functions at the state Department of Health Professions, which runs the program, were disabled for weeks as a result of the April 30, 2009, cyberattack. The hacker claimed to have stolen more than 35 million…
Stolen Praxair Healthcare computer contained client data
Praxair Healthcare Services, Inc. (Home Care Supply in New York) has posted the following notice on their web site: Praxair Healthcare Services, Inc. (Home Care Supply in New York) has notified certain clients of the theft of a company computer whose hard drive contained certain client names and other personal or health-related information. There is…
Breaches recently reported to NYS
Last year, New York State began posting logs of breach reports they receive. Entities experiencing a breach are required to inform the state how many NYS residents were involved, but are not required to indicate the total number of individuals affected. Unfortunately, their logs do not indicate precisely whether the NYS residents affected are employees,…
Ca: Court orders release of Ashley Smith's prison records three years after suicide
An interesting case from Canada indicates that the right to request your personal records be sent to a federal agency not only falls under their Privacy Act but also survives death: A federal judge has ordered Canada’s prison service to disclose the personal files of a teen inmate who killed herself. Federal Court Justice Michael…
KY: Data on 24,600 hospital patients missing
Laura Ungar reports: A flash drive containing personal information on 24,600 patients is missing from Our Lady of Peace psychiatric hospital, prompting it to warn those patients they could be at risk for fraud. Hospital officials are sending letters to all those affected, apologizing for the privacy breach and recommending steps they can take. Officials…