President Truman had a sign on his desk that said, “The buck stops here.” We could use more of that accountability when it comes to data breaches in the education sector. Back in 2006, when I first began blogging about data breaches on PogoWasRight.org, I covered a series of breaches at Ohio University. One of the things that…
Search Results for: education
Ca: Eastern Health Authority discloses employee improperly accessed 20 patients' records
CBC News reports: Eastern Health reported Tuesday that an employee inappropriately accessed 20 patient records in a privacy breach. According to a release from the health authority, the administrative employee has resigned in light of the investigation. Read more on CBC. A statement linked from Eastern Health’s home page says: May 13, 2014 – St….
Four more breaches reported by Baylor Health affiliates (updated)
[Update: The Irving incident affected 2,308 and the McKinney incident affected 1,253. Baylor Health declined to discuss their internal security policies, so we do not know if the doctors were violating any policy by having unencrypted PHI in their email accounts or if Baylor Health permits this.] Original article: After posting the two phishing reports from Baylor…
TX: Baylor Regional Medical Center at Plano notifies patients after physicians fall for phishing attempt
Baylor Regional Medical Center at Plano reported a breach to HHS that affected 1,981 patients. The incident, which occurred on January 23, was coded on the breach tool as a “Hacking/IT Incident” with the location of the information identified as e-mail. A notice on Baylor’s site explains that this was a phishing incident: Notice to…
UMass Medical Center alerts patients to insider data theft that may date back to 2002
Posted on the website of University of Massachusetts Medical Center: Important Privacy Incident Notice for UMass Memorial Medical Center Patients UMass Memorial Medical Center (UMMMC) is committed to protecting the privacy and confidentiality of patient information. Regrettably, this notice concerns an incident involving some of that information. On March 6, 2014, we learned that an employee…
In The Data Breach Regulatory Derby – Kentucky Loses Out to Iowa
Mahmood Sher-jan writes: Put on your fancy hat and pour a mint julep: the annual spectacle of equestrian prowess and creative horse names is upon us. While this Saturday marks the 140th Kentucky Derby, another landmark event occurred earlier this spring in the bluegrass state: Kentucky entered the “data breach regulatory derby” and became the 47th state…