From the BBC: Medical records, confidential letters and X-rays of patients in Lanarkshire have been found on second-hand computer hard drives. Two disks bought for a study on data security contained sensitive information from Monklands and Hairmyres hospitals. NHS Lanarkshire said the disks were disposed of in 2006 before it improved its data protection procedures….
Category: Non-U.S.
WaMu Investments notifying some clients of missing documents
WaMu Investments is notifying 14 people in New Hampshire and an unknown number of residents of other states that personal documents containing their name, account number, address, estimated annual income and estimated net worth are missing. The documents were from 2001 and 2006. Source: letter to NH Attorney General (pdf).
Ca: Lost BlackBerry had patient data
Beverlyy Ware of The Chronicle Herald reports that 74 continuing care patients in the Bridgewater area are being notified that their name, age, address and doctor’s name and information on their medical conditions and medications were on a BlackBerry that was lost April 12. The BlackBerry was not password-protected.
Two email gaffes expose Dutch subscribers’ email addresses
Dutch newsletter subscribers seem to be having a tough time recently keeping their email addresses private. According to Karin Spaink‘s blog, first the police accidentally exposed 650 newsletter recipients’ addresses in the cc-field instead of using the bcc-field of a newsletter, and then Het Dagblad van het Noorden exposed a .txt file with 32.781 e-mail…
Ohio Heritage Bank replaces cards due to HPY breach (updated)
Heartland Payment Systems may be back in VISA’s good graces as PCI-Compliant, but the impact of the breach continues to emerge. Leonard Hayhurst of Coshocton Tribune reports that Ohio Heritage Bank was alerted over the weekend that 800 debit cards were compromised due to the breach. Of the 800 cards, 15 showed fraudulent charges….
Ca: Teacher web site exposes student info
Kate Adams of BayToday reports that a Widdifield Secondary School teacher’s web site exposed student information including contact information and Ontario Health Insurance Program numbers. An investigation revealed that the information was only exposed briefly and that there were only a few “hits.” The school board was able to ascertain the IPs of those accessing…