One of the incidents added to HHS’s public breach tool this week involves a personal laptop stolen from a Mount Sinai Beth Israel Hospital employee. The incident reminds of us the risks of BYOD when the data are not encrypted. I was able to locate a copy of the hospital’s press release on the incident:…
Category: Uncategorized
If you don't respond to notifications of a leak, the problem doesn't go away – it gets worse
On September 3, SLC alleged that WakeMed was leaking patient information: Type: PII Area: Healthcare First Noted: 3 September 2014 Location: NC Total Records: 5000+ Status: Not Monitoring for Follow Up (Not a client) SLC Security Services LLC has noted that this medical establishment has failed to secure patient records. Observed were patient name and date of birth as well as specific…
FL: Defendant Convicted In Identity Theft Tax Fraud Scheme Involving Medical Patients’ Personal Identifying Information
Kenol Augustin, 36, of Miami, was convicted by a federal jury of one count of conspiracy to commit access device fraud, in violation of Title 18, United States Code, Section 1029(b). Sentencing is scheduled for January 15, 2015. At sentencing, Augustin faces up to five years in prison. According to court documents and evidence presented…
Federal sites leaked the locations of people seeking AIDS services for years
Craig Timberg reports: Two federal government Web sites that help people find AIDS-related medical services have begun routinely encrypting user data after years in which they let sensitive information — including the real-world locations of site visitors – onto the Internet unprotected. Until the change, these sites had risked exposing the identities of visitors when they…
Ca: Personal details of 121 home care clients lost in Surrey
Erin Ellis reports: The Fraser Health Authority has told 121 home care clients that a book containing their personal information has mysteriously disappeared. The names, addresses and telephone numbers of the clients — mostly seniors who need care at home — were listed for all 121. Fifty-eight clients received a special written warning about potential…
SC: State employee who stole over 220,000 Medicaid patients' information sentenced
There’s an update to a large insider breach in April 2012 involving South Carolina’s Dept. of Health and Human Services Medicaid database. Christopher Lykes, who was indicted in February 2013 and pleaded guilty in October 2013, has been sentenced to 3 years of probation and 300 hours of community service after pleading guilty to 4 counts of unlawful…