There’s a follow-up to a 2015 breach that was previously reported on this blog. Massachusetts Attorney General Maura Healey made the announcement yesterday: BOSTON — McLean Hospital Corporation will implement new security and training programs and pay a total of $75,000 to resolve claims that it exposed the personal and health information of more than 1,500 people, Attorney General Maura Healey announced today. According…
Category: Lost or Missing
SG: Potential data breach after travel agency employee loses hard disk
David Sun reports: The authorities are investigating a potential data breach after a travel agency employee lost a hard disk containing personal details of clients. The employee of Insight Vacations had taken the disk out of the office without authorisation and lost it in a taxi on the way home. The disk, which has not…
IE: University at centre of potential data breach after USB stick ‘goes missing’
Rachel Farrell reports: A leading university has experienced a potential data breach after a USB stick containing “confidential” details of up to 900 students went missing. NUI Galway, with a student population of over 18,000, confirmed in a statement on their website that the USB may have contained student names, their student numbers and exam…
Boots cover up breach of confidentiality; over 400 lost ‘prescriptions’ from its Chaddesden store
Russell Pollard reports: Around 400 people who picked up their prescribed medication from the Boots store on St Mark’s Road in Chaddesden, in early September, should be concerned, and should be asking some serious questions of Boots. The original versions of their ‘prescriptions’ were lost from the store – the whereabouts of their personal data…
Still sending data via unencrypted thumb drives in the mail? It will cost you.
Weibrecht Law in New Hampshire recently submitted a notification to their state with this explanation of their breach: On or about Monday September 10th, our office sent an unencrypted electronic copy (“thumb drive”) of a client file via US Postal Service. The envelope that the thumb drive was sent in was received by the recipient,…
Heathrow Airport Limited fined £120,000 for serious failings in its data protection practices
From the Information Commissioner’s Office, this monetary penalty notice in response to a breach previously noted on this site: Heathrow Airport Limited (HAL) has been fined £120,000 by the Information Commissioner’s Office (ICO) for failing to ensure that the personal data held on its network was properly secured. On 16 October 2017 a member of…