Two reports that I have been reading today: ARcare ARcare in Arkansas is notifying people whose personal and/or medical information may have been accessed or acquired in a malware incident. The malware enabled an unauthorized actor to access or acquire data between January 18, 2022 and February 24, 2022. The types of information involved included…
Category: Health Data
Health data leak: 1.5 million euro fine against Dedalus Biologie
Seen at Osborne Clark: Following a massive health data leak disclosed in the press concerning nearly 500,000 persons in February 2021, the French Authority for Data Protection (CNIL) has fined (fr) the company Dedalus Biologie 1.5 million euros mainly for failure to comply with its data security obligation. Dedalus Biologie is an application software editor…
New York dental insurer reports phishing incident, French hospital group hit in ransomware incident
Healthplex, Inc. in New York provides dental insurance plans. On November 24, 2021, an employee reportedly fell for a phishing attempt. As a result, the insurer notified 76,262 of their insured members whose personal information may have been impacted. They do not make clear whether their investigation confirmed access and exfiltration or just access, so…
NH: Center for Life Management breach impacted mental health clients
From their notice: The Mental Health Center of Greater Manchester (“MHCGM”) is providing notice of a recent data security event that occurred at a third-party community partner MHCGM had used for data storage, Center for Life Management (“CLM”), that may impact the privacy of certain information relating to MHCGM patients or those who were assessed…
Illinois Gastroenterology Group is providing notification of breach first discovered last October
From their notification: Illinois Gastroenterology Group, PLLC (“IGG”) is providing notice of a recent incident that may affect the security of certain individuals’ information. On October 22, 2021, IGG discovered unusual activity within its computer network. IGG immediately launched an investigation, with the assistance of third-party cybersecurity specialists, to determine the nature and scope of the…
Scott County, Iowa discloses data security incident
Seen on the county’s website, dated April 22, 2022: Notice of Data Privacy Event Scott County, Iowa (“Scott County”) is providing notice of a data privacy event. To date, we have no evidence of actual or attempted misuse of information as a result of this incident. In an abundance of caution, we are notifying potentially…