On June 11, the Illinois Auditor General issued its audit of the Department of Financial and Professional Regulation. The auditors found that: The Department was not able to locate computer equipment and did not adequately plan, coordinate, and verify the transfer of EDP equipment to the Department of Central Management Services (CMS). The Department conducts…
Category: Lost or Missing
OIS Commentary: And some walls will come tumbling down
One of yesterday’s posts on PHIprivacy.net reports a data breach involving Kelsey-Seybold Clinic that has not been reported in the mainstream media. I contacted Kelsey-Seybold after a site visitor alerted me to the breach. The report is frustratingly short on details, though, because Kelsey-Seybold could — and did — simply ignore questions it did not…
NHS Scotland loses patients’ medical history data
Computing.co.uk reports: The Scottish NHS has admitted to the loss of medical histories for 137 patients that were stored on a memory stick, in contravention of data protection rules. The admission comes just days after the Scottish parliament published a report recommending the devolved government should be more proactive ensuring compliance with security standards. Police…
UK: Stolen RAF vice files spark blackmail fear
More details emerge on a breach reported in 2008… David Hencke of Guardian reports: Sensitive files detailing the extra marital affairs, drug taking and use of prostitutes by very senior officers in the RAF have been stolen, raising fears within the Ministry of Defence that personnel could be vulnerable to blackmail. Up to 500 people…
Ca: Passport applications from Kelowna go missing
From the Canadian Press: More than one month after they were filed in Kelowna, at least 50 Canadian passport applications have disappeared. Passport Canada officials in Vancouver confirm the loss. They have advised affected applicants to check their bank accounts and keep a close watch for any potential identity theft. In December 2008, the Privacy…
UK: Leicester City Council breaches the Data Protection Act
From a press release (pdf) from the Information Commissioner’s Office, this follow-up to a breach initially reported in November 2008: Leicester City Council has signed a formal Undertaking outlining that it will endeavour to keep personal information secure in future. The Information Commissioner’s Office (ICO) found Leicester City Council in breach of the Data Protection…