Samantha Liss reports: SSM Health said that a former employee inappropriately accessed the medical records of its patients in multiple states. Unclear of the full extent, SSM said it’s notifying all 29,000 patients whose records were ever accessed by this former call center employee. […] The former employee inappropriately accessed certain records over an eight-month…
Category: U.S.
Police say car lot took out loans on unsuspecting customers
Chris Hayes reports: ST. LOUIS COUNTY, Mo. – You could be a victim and not even know it. Police believe there may be other victims of Autoway Car Sales on St. Charles Rock Road. This morning, Pagedale police officers weaved through the car lot looking for connections between vehicles and other potential victims. Owner Anas…
HHS announces $2.3 million settlement with 21st Century Oncology for violations of HIPAA
I’m not sure why HHS delayed a few weeks in announcing their settlement with 21st Century Oncology, as some of us reported the $2.3 million settlement earlier this month, but HHS has now issued a press release: Failure to protect the health records of millions of persons costs entity millions of dollars 21st Century Oncology,…
H&R Block employee gave drug dealer access to client information, charges state
Phoebe Tollefson reports: An H&R Block employee let a man who sold him pot “help himself” to filing cabinets containing customer information earlier this year in order to settle a debt, prosecutors allege. James Maurice Palmer, 27, faces charges of forgery and identity theft, both felonies, stemming from the incident in April. Read more on…
PA: Employee-patient allegedly photographed during surgery files suit against Washington Hospital and others
Barbara Miller reports: An employee of Washington Hospital who had an operation at her workplace filed a complaint in Washington County Court against the institution, a doctor and several co-workers in connection with photos of her private parts that allegedly were taken and later shared. The plaintiff, identified only as Jane Doe, worked as a…
A tale of three leaks, Wednesday edition
On December 6, DataBreaches.net was contacted by researchers who requested help notifying two entities that they were exposing health information due to misconfigured AWS S3 buckets. They would turn out to be a delight to deal with, unlike a third entity that was also leaking information from a misconfigured S3 bucket. So let’s start with…