First it was Carolina Cardiology Consultants disclosing that 2500 of their patients had been affected by a breach at their business associate, Ambucor. Then it was Lebanon Cardiology Associates, PC (now known as WellSpan Cardiology) notifying HHS that 537 of their patients had been affected by Ambucor’s incident. Now it’s Wentworth-Douglass Hospital notifying 775 of their patients of the breach….
Category: U.S.
Briar Hill Management notifies 2,000 nursing facilities residents of lost laptop
Notice of Privacy Event at Briar Hill Management Briar Hill Management of Ridgeland, Mississippi provides management services for skilled nursing facilities in the State. The company takes resident privacy very seriously and, as part of that commitment, it is notifying all potentially affected residents of a privacy event that may impact personal health information. On…
IG: IRS Employees Sent Unencrypted Emails Containing Personal Data of Thousands of Taxpayers
Ian Smith reports: A recent report from the Treasury Inspector General for Tax Administration (TIGTA) found that IRS employees sent unencrypted emails which contained 8,031 different taxpayers’ personally identifiable information. According to the report, TIGTA found 326 unencrypted emails containing taxpayer data. 275 of the emails were sent internally within IRS, while 51 emails were…
Michigan State University confirms data breach of server containing 400,000 student, staff records (Updated)
WXYZ reports: Michigan Sate University is confirming that someone breached a database that contains around 400,000 records containing personal information. The breach happened on November 13. According to MSU, that information “included names, Social Security numbers, MSU identification numbers, and in some cases, date of birth of some current and former students and employees. It…
Buffalo Public Schools exposed more than 4,000 records with students’ and parents’ personal information [DISPUTED]
Update: This report has been disputed. BPS claims that their IT department says “this is a dummy test page with no real information.” DataBreaches.net notes that the file was more than 100 pages, populated with information. One record on the first page did appear to be test or dummy data, but because DataBreaches.net did not…
EXCLUSIVE: Bay Sleep Clinic patients were viewable online during sleep studies
Bay Sleep Clinic (BSC) has more than one dozen locations in California offering sleep medicine diagnostic services. Their site advertises that BSC: Provides monitoring during a complete sleep cycle in our fully equipped, comfortable setting. That monitoring appears to include video monitoring of their patients who, after being wired up to monitors, attempt to sleep in one of their…