Today’s Poughkeepsie Journal has a news story about a phishing incident that appears to have been discovered in July, 2018 that affected an unspecified number of Health Quest patients. From the available information, it sounds like Health Quest first discovered email attachments in January, 2019, and then it took them until April 2, 2019 to…
Category: U.S.
NY: Broome County security breach put employees’ and clients’ personal information at risk
Katie Sullivan Borrelli reports: Broome County says an unauthorized individual may have had access to the personal information of county employees and individuals who receive the county’s care, including their Social Security numbers, medical records and bank account information. In a news release sent on its behalf by Mullen Coughlin LLC, of Wayne, Pennsylvania, the…
MO: Data security breach affects thousands of students of Jefferson City Public Schools
A now-suspended employee of Jefferson City Public Schools transferred student files containing medical information and student identification numbers to a personal email account, the district said in a news release Wednesday. The district said it recently determined the employee transferred the files into a personal Gmail account, which is a violation of district policy. The…
Citrix Sued For Not Securing Employee Info Before Data Breach
Sergiu Gatlan reports: A class action complaint was filed by an ex-employee of Citrix for damages suffered following the security breach which allowed hackers to access Citrix’s internal assets for roughly six months and to steal sensitive personal information of both current and former employees. The plaintiff is Lindsey Howard, “a resident and citizen of…
Cyber attack could keep county servers down for days
Luzerne County’s administration has shut down some computer servers and work stations to address a cyber attack discovered last weekend, officials said. On Wednesday morning, county Administrative Services Division Head David Parsnik said the clean-up process may take several days to complete. By the afternoon, the administration sent workers an email indicating the servers may…
Tennessee, 15 Other States Reach $900,000 Data Breach Settlement With Medical Informatics Engineering
Attorney General Herbert H. Slatery III announced Wednesday that a U.S. District Court judge has signed a consent judgment negotiated by 16 states’ attorneys general and Medical Informatics Engineering, Inc. This case was the nation’s first-ever multistate lawsuit involving a HIPAA-related data breach. The lawsuit, led by Indiana, was filed in December of 2018 against…