Kirsty Johnston reports: A doctor lost a file containing highly sensitive information about breast cancer patients, while walking between a hospital and a radiation clinic, it has emerged. Police have been called over the blunder amid fears someone has found the document and plans to make it public. Both agencies involved – Southern District Health…
Category: Health Data
MSK Group notifying patients of data security incident
MSK Group in Tennessee, and its divisions, OrthoMemphis, Memphis Orthopaedic Group, Tabor Orthopedics, and Crosstown Back & Pain Institute, are notifying patients of a data security incident that they discovered on May 7. In a notification letter dated July 5 and signed by Kimble L. Jenkins, CEO, the orthopedic group offered those affected free services with…
VCU Health System notifies patients of improper access to information
The Progress-Index reports: VCU Health System is notifying about 4,700 individuals that their or their minor child’s electronic health information was inappropriately accessed. There is no indication that the private health information has been or will be used for any malicious purposes. The matter came to light on May 9, when an unusual pattern of…
Only researchers accessed the exposed 211 call logs – Los Angeles County
There is a follow-up to an incident involving exposed Los Angeles County 211 call logs. The misconfiguration had been discovered by UpGuard and was reported in May. Now the County has submitted its report to the California Attorney General’s Office. It states, in part: Our investigation determined that the incident was caused by an employee…
WI: Manitowoc County data breach affected personal health, medical information
Alisa M. Shafer reports: Manitowoc County officials have released more information about a data breach of a Manitowoc County email account in January. The press release from June 22 states: “On or around January 14, 2018, an unauthorized party was able to gain access to a Manitowoc County email account most likely through what is called…
Humana notifies members after credential stuffing attack on Humana.com and Go365.com
Health insurer Humana recently began notifying an unspecified number of health plan members after detecting and blocking a credential stuffing attack against Humana.com and Go365.com. The attacks took place on June 3 and June 4 from overseas IP addresses. In a notification letter dated June 21, Jim Theiss, Humana’s Chief Privacy Officer, writes: On June 3,…