Now that I know what I’m looking for, I’m finding more evidence of targeted email attacks affecting members of Ascension Health. For previous reports on this incident, read here and here. On March 16, Sacred Heart Health System in Florida posted this notice on their site about a breach they reported to HHS as affecting…
Category: Health Data
And then there were
And then there were three (Ascension Health entities breached)
Now can I say, “I told you so?” When Ascension Health wouldn’t answer my question as to whether there were other members who had also had a phishing incident recently other than the two hospitals I had already reported on, I was even more suspicious. Then this afternoon, I discovered that St. Agnes Health Care,…
NC: Patient records removed from abandoned Statesville hospital
Tina Terry reports that a Channel 9 News investigation resulted in crews removing dozens of boxes of patient records from an abandoned Statesville hospital, the old Davis Hospital. Now wait for it: the records were abandoned more than 30 years ago. But according to Davis Hospital, back then, “the hospital was operated by an unrelated organization.” Read…
Oh, those old files left lying around on your server, Saturday edition
It turned out to be no huge deal (thankfully), but after an announcement on Twitter by @Compl3x1ty of a login dump involving a medical group’s site, DataBreaches.net attempted to contact the Lutheran Health Network to alert them that data from the St. Joseph Medical Group had been accessed and dumped. The data dump indicated that an SQL injection had…
Medical pot users try class action after Health Canada privacy breach
Sherri Borden Colley reports the latest development in a lawsuit filed after an administrative error resulted in “outing” 40,000 medical marijuana users: Lawyers will go before a Federal Court judge in Halifax in June to ask the court to certify a proposed class action on behalf of 40,000 medical marijuana users whose privacy was breached by…
Seton Family Health notifying 39,000 patients after employee falls for phish; Second Ascension Health member to report breach this week (Update2)
Is Ascension Health being targeted by attackers successfully acquiring employee e-mail account logins via phishing? (Update 2: It seems they are. See this post after reading the one below.) Zach Lozano reports that Seton Family of Hospitals will provide free identity monitoring and protection services for patients who had their personal information leaked in a phishing…