CBC News reports: Newfoundland and Labrador’s privacy commissioner says a registered massage therapist breached the Personal Health Information Act by failing to properly safeguard a patient’s file. Commissioner Ed Ring says the therapist lost a file containing the personal health information of the complainant, a patient. The commissioner recommended that the massage therapist, and other…
Security breach: Twice victimized
Eleanor Sundwall has a well-written commentary about the Utah Dept. of Health breach that I hope people read as she articulates how entities respond to a breach may leave the victims of a breach feeling even more victimized. You can read her commentary on the Salt Lake Tribune. Eleanor’s story raises another issue, however. She…
Ie: Security fears for prison staff after details found in cell
Occasionally I’ve noted breaches that leave people concerned for their physical safety. A breach involving Islington Council reported at the end of last month falls into that group, as did an earlier breach involving the Insurance Corporation of British Columbia. Now Cormac O’Keeffe reports on one from Ireland: Prison officers held an emergency meeting with…
Suit hits Pentagon over huge 2011 data breach
Bryan Bender has a piece in The Boston Globe about the TRICARE/SAIC breach last December. The story doesn’t shed any new light on the breach, and I am still waiting for Rep. Ed Markey to release the response he got from TRICARE to a letter he had sent them (his staff assures me he will…
UK: Kingston Council faces privacy breach claim
Nazia Dewji reports that a mailing error by Kingston Council resulted in 100 rent statements being sent out with the first page belonging to one tenant’s account and the second page belonging to a different person: The data included details of housing benefits entitlements and other benefits, the name of the bank each tenant used,…
Atlanta Student Suspended for Breach of School Database
Jeff Goldman reports: A 19-year-old student at Atlanta’s Booker T. Washington High School was recently suspended for seven days for stealing his father’s user name and password in order to change 18 fellow students’ attendance and course assignment records in exchange for money — the student’s father is a counselor at the school. The students…