Zach Clemens reports that Estes Park Health suffered a ransomware attack on June 2. No data was exfiltrated, but it was locked up, and after consulting with their cyberinsurer and IT people, they decided that they had to pay the ransom. “At that point in time we are looking at the patients we have internally,…
Category: Health Data
OH: N.E.O. Urology pays attackers $75,000 after ransomware attack
Corey Vallas reports N.E.O. Urology in Boardman, Ohio paid attackers $75,000 after their computer systems were encrypted by ransomware. Police say the fax listed “Pay4Day.io” as the contact for further information. Read more on WFMJ. There is no notice on the medical practice’s web site as of the time of this posting, but it’s interesting…
Jury awards patient $300k after hospital employee improperly accessed and shared her records
This is the kind of insider breach that makes patients lose confidence in hospitals. I am not surprised that the jury came down hard on the hospital. Of the $300,000 award, $295,000 is punitive damages against the hospital for not doing anything against the doctor when they were made aware of the problem. A Coffee…
Ca: Privacy breach at Queen Elizabeth Hospital spurs surveillance of an employee’s access to health charts
Brian Higgins reports: P.E.I.’s privacy watchdog wants Health PEI to keep closer tabs on one of its employee’s use of patient health records, following a privacy breach last year at Queen Elizabeth Hospital. That’s according to a new report by Information and Privacy Commissioner Karen Rose, posted May 30. According to the report, in March…
Two lists with names and details of 33 patients from Letterkenny General Hospital found after being dumped
The Irish Sun reports: Two lists containing the names and details of 33 patients from a Donegal hospital were found dumped in Letterkenny in recent weeks. The latest serious breach in patient confidentiality at Letterkenny General Hospital has been confirmed by Saolta, the company which governs the hospital. Read more on Irish Sun.
Ca: Nova Scotia Health Authority suffers data breach, nearly 3,000 patients possibly affected
Alexander Quon reports: The Nova Scotia Health Authority (NSHA) is in the process of notifying nearly 3,000 people about a potential privacy breach involving personal health information, the organization announced on Monday. The health authority says the breach was detected by its IT team on May 13, 2019, after an employee’s email account was compromised…