Kevin Collier reports: A former National Security Agency contractor accused of the largest security breach in US intelligence history is expected to plead guilty on Thursday, his lawyer told CNN. Harold “Hal” Martin, 54, had worked for 23 years as a contractor for companies that contracted with various intelligence agencies and maintained a government clearance…
Category: Subcontractor
ZOLL notifying 277,319 patients of vendor data exposure incident
ZOLL Medical Corporation, an Asahi Kasei Group Company, develops and markets medical devices and software solutions. A press release on March 18 described an incident that impacted what they describe as “some patients’ personal and medical information.” On January 24, 2019, ZOLL discovered that some email archived by an unnamed third-party service provider had been exposed…
Thousands of health records and doctor’s notes were exposed daily
Zack Whittaker reports: A health tech company was leaking thousands of doctor’s notes, medical records, and prescriptions daily after a security lapse left a server without a password. The little-known software company, California-based Meditab, bills itself as one of the leading electronic medical records software makers for hospitals, doctor’s offices, and pharmacies. The company, among other…
Some job applicants are first learning about the May, 2018 JobScience breach. Why?
In November, 2018, this site noted a breach disclosed by Huntsville Hospital involving JobScience, Inc., a vendor providing online job application services. On November 10, we reported that other entities were also affected, such as Tallahassee Memorial Hospital, who had been notified in September by JobScience, and NorthBay Healthcare Corp., who were notified in October….
Personal information of over 800,000 blood donors was accessible online for 2 months: HSA
Felicia Choo reports: The personal information of more than 800,000 people who have donated or tried to donate blood in Singapore since 1986 was improperly put online by a Health Sciences Authority (HSA) vendor for more than two months, but access to the database was cut off soon after the discovery. Disclosing this in a…
Another business associate breach, another gap to notification of patients
So here’s yet another breach with what seems like a long delay to notification. In this case, Re-Solutions, a division of RSC Insurance Brokerage in Massachusetts, is a business associate to healthcare providers. On August 23, 2018, an employee’s laptop was stolen. In its disclosure letter, the laptop was described as “password-protected,” but there was…