As I was just saying in the post about the Girl Scouts breach, children’s medical information can be breached in so many ways outside of the healthcare sector. And that’s true outside the U.S. as well. Priit Pärnapuu provides a concerning, but timely, example from Estonia: Schools’ information system EKIS allowed anyone to read and…
Search Results for: education
NC: Notice to Catawba Valley Medical Center Patients of a Phishing Email Incident
This notice from their web site just showed up in my searches: Catawba Valley Medical Center (CVMC) is committed to protecting the security and confidentiality of our patients’ information. Regrettably, this notice concerns an incident that may have involved some of that information. On August 13, 2018, CVMC determined an unauthorized person may have gained…
VA: Norfolk school parents notified of medical data breach
Sara Gregory reports: Norfolk school officials this week notified the parents of students and employees whose medical information was publicly disclosed in school crisis plans online for a year until August. After staff and attorneys reviewed the plans, the district identified a total of 308 students and staff who were referenced in the school crisis…
AU: School students’ private medical details leaked in Google sync privacy mess
Here’s what appears to be a serious breach involving Google drive and syncing. Henrietta Cook reports: Confidential files detailing high school students’ medical conditions, including anxiety issues and those at risk of suicide, have been found on a Melbourne schoolgirl’s iPad. The document contains photos, names and medical and family details of years 7 to 12…
An OCR investigation illustrates the value of investigating small and medium-sized entities
One of the common themes in discussing security is that many organizations are not “mature” yet. And of course, as HIPAA recognizes in its security rule, smaller practices should not be expected to do everything you might expect a larger hospital system to do. But even small or medium-sized entities need to comply with the core…
CA: John F. Kennedy High School breach letter to parents
Note: this is the John F. Kennedy High School in La Palma, California. October 3, 2018 Notice of Data Breach As a precautionary measure, we are writing to inform you about a recent data security incident that occurred on October 2, 2018. What Happened? On October 2, 2018 at 5:04 p.m., an email was sent…