Another day, another leak involving sensitive information. From the UpGuard team: The UpGuard Cyber Risk Team can now disclose that sensitive data from the Los Angeles County 211 service, a nonprofit assistance organization described on their website as “the central source for providing information and referrals for all health and human services in LA County,” was…
Category: Health Data
LifeBridge Health and LifeBridge Potomac Professionals Notify Patients of a Recent Security Incident
From their press release: LifeBridge Health and LifeBridge Potomac Professionals announced today that it is sending letters to patients about a recent security incident involving patient information. On March 18, 2018, LifeBridge Health discovered that malware infected the server that host LifeBridge Potomac Professional’s electronic medical record, and LifeBridge Health’s patient registration and billing systems….
UT physician group improperly shared patient email addresses
Todd Ackerman reports: A clinic owned by the physicians organization of the University of Texas Health Science Center at Houston improperly sent out mass emails containing the email addresses of many of its patients. UT Physicians’ Davis Clinic sent batches of emails, notification of a doctor leaving the clinic, to patients last week. There were…
More than 200,000 patients’ records were exposed on MedEvolve’s public FTP server – researcher
Common sense dictates that patients’ protected health information should not be made freely available on FTP servers that have no login required. And yet it still happens, and has happened again. Recently, this site learned of another FTP server exposing patients’ information. This particular FTP server belongs to MedEvolve, an Arkansas company that provides practice management…
OR: LaPorte & Associates notifies clients of laptop theft
From their press release: LaPorte & Associates, Inc. (“LaPorte”) today announced an incident involving potential unauthorized access to a laptop containing certain personal information. LaPorte is an insurance agency that provides, among other things, insurance procurement, consultation, and support services for its clients. The data potentially subject to unauthorized access varies, but includes some combination…
CA: Notice to Individuals Regarding Privacy Incident Involving Capitol Administrators, Inc.
Notice how they do not tell us when the phishing attack occurred – only when they concluded their investigation of it. So when was this attack, and when was it actually discovered for purposes of the 60-day clock? And how many people are being notified? From their substitute notice on their web site: Capitol Administrators,…