DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Category: Health Data

OCR should fine entities that close and just dump patient records

Posted on December 25, 2015 by Dissent

Seriously. How many times will see news reports of how medical practices closed their doors and just dumped patient records? Here’s another case this week, reported by WSFA in Alabama, who made great efforts to track down someone – anyone – who might be able to help identify the culprit (and yes, I use the…

Read more

Physicians Health Plan of Northern Indiana notifies Indigo members whose billing statements were erroneously sent to others

Posted on December 24, 2015 by Dissent

Another problem with mailing bills that results in a HIPAA breach.  Physicians Health Plan of Northern Indiana, Inc. (PHPNI) posted an FAQ on December 18 about an incident affecting Indigo members. Their report to HHS indicates that 1,708 patients were affected. What happened? An error occurred in the assembly of a premium billing statement mailing on December 8,…

Read more

Allina Health Isles Clinic notifies more than 6,000 patients of improper disposal of their records

Posted on December 24, 2015 by Dissent

First, the notice from Allina Health in Minnesota: This notice concerns a privacy situation that occurred at the Allina Health Isles Clinic, located at 2800 Hennepin Avenue, Minneapolis, MN 55408. On October 27, 2015, Allina Health discovered that in limited circumstances, containers which may have had documents with patient information were being emptied into a…

Read more

Dumont hospital employees shocked Dr. Fernando Rojas returning to work

Posted on December 24, 2015 by Dissent

CBC News reports an update to a breach noted previously on this site. Many staff members at the Georges Dumont Hospital in Moncton do not welcome Dr. Fernando Rojas’ return to work. Rojas has not been working at the Georges Dumont since March 2014. The radiation oncologist looked at 141 female patient medical records without authorization…

Read more

Can a Business Associate be Liable for a HIPAA Breach When Its Client Isn’t a Covered Entity?

Posted on December 24, 2015 by Dissent

Yesterday morning, some of were following up on a ProPublica report  about a New Jersey clinic who, when suing patients for overdue accounts, included their diagnostic codes in materials sent to their collection agency. Those records – containing the patients’ names, diagnostic codes, and treatment codes – became part of public court records. There were some…

Read more

NY dermatologist notifies patients after email error exposes PHI

Posted on December 23, 2015 by Dissent

Add Mary Ruth Buchness, M.D. to the list of medical practices that have reported a breach in 2015.  On December 12, she submitted a copy of her notification letter to patients to the Vermont Attorney General’s Office. A copy of the notice is also prominently linked from her web site. Dr. Buchness writes, in part:…

Read more
  • Previous
  • 1
  • …
  • 729
  • 730
  • 731
  • 732
  • 733
  • 734
  • 735
  • …
  • 1,423
  • Next

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • SK Telecom to be fined for late data breach report, ordered to waive cancellation fees, criminal investigation into them launched
  • Louis Vuitton Korea suffers cyberattack as customer data leaked
  • Hunters International to provide free decryptors for all victims as they shut down (1)
  • SEC and SolarWinds Seek Settlement in Securities Fraud Case
  • Cyberattacks Disrupt Iran’s Bread Distribution, Payments Remain Frozen
  • Hacker with ‘political agenda’ stole data from Columbia, university says
  • Keymous+ Hacker Group Claims Responsibility for Over 700 Global DDoS Attacks
  • Data breach reveals Catwatchful ‘stalkerware’ is spying on thousands of phones
  • DOJ investigates ex-ransomware negotiator over extortion kickbacks
  • Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Record-Breaking $1.55M CCPA Settlement Against Health Information Website Publisher
  • Ninth Circuit Reviews Website Tracking Class Actions and the Reach of California’s Privacy Law
  • US healthcare offshoring: Navigating patient data privacy laws and regulations
  • Data breach reveals Catwatchful ‘stalkerware’ is spying on thousands of phones
  • Google Trackers: What You Can Actually Escape And What You Can’t
  • Oregon Amends Its Comprehensive Privacy Statute
  • Wisconsin Supreme Court’s Liberal Majority Strikes Down 176-Year-Old Abortion Ban

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.