Maryland-based HomeCall Inc. recently notified the Maryland Attorney General’s Office that an employee’s portable point-of-care device was stolen. The device contained names, addresses, SSN, medical record number, diagnoses, and treatment information. HomeCall reports that the device was “multi-level password protected” (but not encrypted). In correspondence to those affected, HomeCall stated that the device…
Search Results for: patient
Johnson & Johnson Seeks Access to Medical Records
newspersonalinjury blogs about a specific personal injury lawsuit but I mention it here because it raises a general issue about whether people should ever sign releases in such cases. For what it’s worth, I don’t think J&J is doing anything most defendant firms wouldn’t do under such circumstances, either. Johnson & Johnson has retained Broadspire,…
University of Oklahoma Neurology Clinic notifies almost 20,000 of security breach
In the process of updating PHIprivacy.net to reflect breaches newly disclosed by the U.S. Dept. of Health and Human Services (HHS), I found reference to a breach for which I was able to find a companion statement. The University of Oklahoma-Tulsa, Neurology Clinic recently notified HHS of an incident affecting 19,264 patients. According to HHS’s…
Nine more breaches newly revealed on HHS's web site
Thanks to Adam Shostack, I realized that although HHS provides two formats for their breach report database, the two databases do not necessarily contain the same number of breach reports on any given day. While he was analyzing data based on the .xml version containing 181 breach reports, I had been using the .csv version,…
Pointer: Lessons from HHS Breach Data
Over on The New School of Information Security, Adam Shostack responded to my recent blog entry about what can we learn from the HHS breach reports. Looking at “insider” incidents, Adam writes, in part: There were 10 incidents, (6% of all incidents involving 500 or more people). They impacted 50,491 people (1% of all…
Doubleheader: the dangers of blogging about private matters and passing the buck, Friday edition
I was running my usual searches and the like to find items that I might want to post to my blogs, when I came across a link to an item and where the first line or so of the entry in the search engine results looked interesting. So I clicked on the link, only to…