Tamsyn Parker reports: A woman was shocked to find the details of an unknown baby had been added to her online Inland Revenue account and to receive a $240 back-dated payment for the child. Katie, who doesn’t want her last name used, said she received an email from the IRD last week to say her…
Category: Exposure
UK: Details of ‘vulnerable kids’ uploaded to Birmingham City Council website in ‘serious’ data breach
Nick Horner reports: A “serious” online data breach at Birmingham City Council saw personal information – allegedly the details of “vulnerable children” – put at risk. Data, said to relate to youngsters entitled to free bus passes, was uploaded “in error” by staff and was “potentially available externally”, the authority said in an email raising the alarm,…
Playing ‘Price is Right’-style game, GR doctors post operating room photos online
Susan Samples reports: Spectrum Health says it has launched an investigation after a group of doctors posted to Instagram photos taken in the operating room that show an organ from one patient and fibroid tissue from another. One picture showed a doctor posing with a length of fibrous tissue in his hand. It appeared the…
NZ: West Coast health board in privacy blunder involving medical information
Joanne Naish reports: The West Coast District Health Board (DHB) has been accused of breaching patients’ privacy after giving private medical information to the wrong person. It is the second time the DHB has come under fire after documents containing information about hundreds of patients were found blowing around a Christchurch street in 2019. Read more…
Mobile Anesthesiologists notifies patients of ePHI leak
Sometimes it takes months until I see a notification related to a leak I reported to an entity. This week, Mobile Anesthesiologists disclosed a data leak. Their notification is embedded below. The back story on this one is that in December, a researcher alerted DataBreaches.net to a leak involving what appeared to be ePHI from…
WI: 900 emails of COVID vaccination registrants accidentally shared in Walworth County
Lake Geneva Regional News reports: Over 900 emails belonging to those who registered for COVID-19 vaccines were accidentally shared with the public. On March 11, the Walworth County Department of Health & Human Services announced a breach of the Health Insurance Portability and Accountability Act (HIPAA) related to its vaccine registration process. Read more on…