HIPAA Journal reports: Vail Valley Medical Center (VVMC) is in the process of notifying 3,118 patients of the inappropriate disclosure of some of their protected health information (PHI). A physical therapist formerly employed at Howard Head Sports Medicine was discovered to have copied the PHI of patients and taken the data to his new employer….
Category: U.S.
Edwin Shaw employee loses unencrypted flash drive with 975 patients’ info
An anonymous site visitor kindly pointed me to this item that was in the Akron Beacon Journal last week: If you went to Akron General Edwin Shaw Rehabilitation hospital in 2010 or 2011, expect to receive a letter from hospital officials saying that some of your information may have been compromised. Officials said the data…
dōTERRA letter informs customers of possible data breach
McKenzie Romero reports: A letter sent to customers and distributors from doTERRA, the Utah-based essential oil company, is warning that an apparent data breach last month may have compromised their personal information. A letter dated April 18 explains that a breach of doTERRA’s third-party data hosting and software service provider may have accessed the names,…
NY: Tax refund fraud reported by Stony Point employees under investigation
It looks like employees of yet another town may have become victims of tax refund fraud, and the town is trying to determine the cause. This time, the report comes from Stony Point, New York, where 30 current and former employees have reported that when they attempted to file their tax returns, they discovered that…
Lawsuit claims workers comp insurers hacked into injured workers’ files
Donna Mahoney reports: A California worker claims in a federal lawsuit that three of the largest workers compensation insurance companies in California illegally hacked over 32,000 confidential workers comp files. A lawsuit, which seeks class action status, was filed Tuesday in the U.S. District Court in Los Angeles against Omaha, Nebraska-based Berkshire Hathaway Homestate, San…
Grand Sierra Resort guest payment cards breached in 2014 and again in 2015
The Grand Sierra Resort in Reno, Nevada, has become the latest hospitality entity to disclose a data breach involving customers’ credit card information. In this case, there appear to be two time frames during which cards used at their food and retail locations may have been compromised: for a one-month period in 2014 and again…