Update: This incident was reported to HHS on January 15 as affecting 28,209 patients. Montana Public Radio reports that New West Health Services is notifying 25,000 members after a laptop with their PHI was stolen. Here’s the statement that was posted on New West Medicare’s site today, with one interruption by me for a short,…
Category: U.S.
MaineGeneral breach update: investigation revealed additional PHI compromised
There’s an update to a breach reported by MaineGeneral Health in December after the FBI alerted them in November that information had been found on an external web site. At the time of their December notification, MG had noted that the scope of the incident was still under investigation. Today, they issued a press release with…
WV: Woman says St. Mary’s didn’t protect her medical records
Kyla Asbury reports on another small-n breach case that reportedly had huge consequences for the victim: A Wayne County woman is suing St. Mary’s Medical Center after she claims it allowed people to access her private health information that should not have had access. St. Mary’s Medical Management LLC; Cabell-Huntington Hospital Inc.; Rebecca Winters, formerly…
TaxAct Acknowledges Data Breach
Jeff Goldman reports: The tax preparation solutions provider TaxAct recently began notifying an undisclosed number of customers that their personal information may have been inappropriately accessed. “We have concluded that an unauthorized third party accessed your TaxAct account between November 10 and December 4, 2015,” the company stated in a letter [PDF] sent on January 11, 2016 to those…
Improper redaction exposed Virginia employees’ personal info
Earlier this week, Jigsaw Security noted that they had discovered that improper redaction of documents posted on the Virginia Dept of Human Resource Management website was potentially exposing employees’ personal information: A PDF posted by this organization contained information that was obfuscated by blocks but was a layered image so if you edit the document the…
Nearly 21,000 customer records hit by Blue Shield security breach
Courtney Perkes reports: Blue Shield of California announced Thursday that personal information from nearly 21,000 individual and family plan customers was accessed in a security breach late last year. The information included names, addresses, dates of birth and Social Security numbers. Read more on Orange County Register. This incident does not appear to be on…