Last week, HealthFitness notified Gerdau that there was a possible data breach of the personal health information of some of its employees, spouses and dependents, according to a news release cited in a Jackson Sun news story: The letter notes that HealthFitness, which works as the third-party administrator for Gerdau’s health management and wellness program, discovered…
Category: Health Data
Online security breach at SAH disgruntles many job seekers
Darren Taylor reports: A SooToday.com reader has informed us that he has been the target of unsolicited emails, texts and telemarketing calls, and claims this is the result of a mishap involving the Sault Area Hospital (SAH) website’s online job application system. The reader was notified by SAH in a letter dated October 24, 2013…
Former Mount Sinai Medical Center employee convicted in patient ID theft for tax refund fraud scheme
Oliver Gayle of Miami has been convicted in an tax refund scheme involving the theft of patient information from Mount Sinai Medical Center. Gayle, who was employed as a temp, had a previous felony conviction on RICO/racketeering charges prior to his employment at the medical center. The South Florida Business Journal asked the medical center how he…
Notice for Allina Health patients regarding privacy incident
The following notice is linked from Allina Health‘s home page: Allina Health is committed to protecting the privacy of our patients’ personal information. Regrettably, this notice concerns an incident involving some of that information. A certified medical assistant at an Allina Health clinic viewed patients’ personal health information unnecessarily. Only those caregivers with a role…
Ca: AHS cited for privacy breach after devastating Shaw fire
I’ve occasionally noted the problems that may arise following a natural disaster. Here’s a case where a health service did its best to ensure patient care following a massive outage due to fire. Although they had a plan in place, the commissioner’s investigation found that the plan was not sufficiently comprehensive, was not understood by…
UK: ICO follow-up on Burnett Practice undertaking
In April, I noted that the Burnett Practice had signed an undertaking with the Information Commissioner’s Office (ICO) after an email account they used to notify patients of upcoming appointments was hacked. Today, the ICO posted a summary of their follow-up to ensure that the practice complied with the undertaking. Given that the follow-up actions by…