Since June of 2016, when they somewhat burst on the scene, there has been a lot written about the hacker/collective known as TheDarkOverlord (TDO). A lot of it appears to be just plain inaccurate, but in some cases, the inaccurate reporting can be traced back to misleading communications or tweets by TDO. As a recent example of miscommunication creating an inaccurate…
Category: Health Data
“Shoot the messenger:” NYC hospital and vendor threaten DataBreaches.net for reporting on their security failure
Vendor’s mistake potentially exposed “millions” of Bronx-Lebanon Hospital patients’ information; Hospital and vendor try to claim that iHealth Solutions was “hacked” by security researchers who uncovered the security problem; Hospital and vendor issue series of demands, threaten DataBreaches.net for reporting on incident; On May 3, Kromtech Security’s research team, conducting routine research, found that confidential and sensitive patient…
Coney Island Hospital notifies patients of….. what?
Crain’s reports: A volunteer at NYC Health + Hospitals/Coney Island gained unauthorized access to the protected health information of nearly 3,500 patients, the hospital told the U.S. Department of Health and Human Services last week. The volunteer in Coney Island’s phlebotomy department entered patient names in a logbook, cleaned up data storage areas and transported…
Charlotte medical practice worker sold patients’ private info for $10 apiece, feds say
Blake Hanson reports on an incident that was seemingly reported to federal regulators and patients last year, but flew under the media radar for the most part until criminal charges were revealed this week: Federal prosecutors have charged a Charlotte medical practice employee over accusations she sold patient’s private information to an identity thief. Keniona…
UK: GP staff member fined for looking at confidential records
Carl Difford reports: An administrator who worked in a GP’s surgery has been fined after she illegally accessed the confidential medical records of one patient 51 times. Sally Anne Day, 41, of Abergavenny, logged on to a second patient’s records eight times, the Information Commissioner’s Office (ICO), which prosecuted the case said. Day, who worked…
Email gaffe exposes more than 700 Rutland Regional Medical Center patient email addresses in survey request
April McCullum reports: Rutland Regional Medical Center is facing privacy questions after sending out a patient survey that revealed more than 700 email addresses. The hospital sent an electronic survey this month about how the hospital could improve its patient discharge paperwork, according to a copy obtained by the Burlington Free Press. Hundreds of email addresses in the “To”…