On Feb. 12, following up on a lead from HHS’s breach tool, I learned about a breach at Saint Francis – Broken Arrow Hospital in Oklahoma, which I reported on this blog, here. Over a month later, the hospital has issued a press release. It says, in part: Recently, Saint Francis Health System reported security…
OH: Walnut Township school payroll records hacked
Carl Burnett Jr. reports that someone hacked into the Walnut Township School District payroll records database: Someone gained access into the payroll records between 1:15 p.m. Monday and 10 a.m. Tuesday, according to a Fairfield County Sheriff’s Office report. […] The Sheriff’s Office report indicated the hackers had been able to access the 2008 payroll…
(update) UK: University inquiry as students’ personal details leaked online
The University of York data leak reported earlier this week continues to get a lot of attention in the UK. A news story today in the Yorkshire Post adds/confirms a few details: Students’ addresses, phone numbers and even A-level results were published on the University of York website in what a campaign group has called…
Way to risk those lawsuits, U. Iowa!
Having your employees find out that you are monitoring them surreptitiously doesn’t make for happy employees and may lead to legal problems in terms of surveillance laws and labor laws. Having a patient privacy incident can be infinitely worse. Managing to risk combining both can be a nightmare. But that’s somewhat what happened recently in…
Mailing error exposes over 3,000 cancer patients' names to each other
A mailing error resulted in Cancer Care Northwest sending routine mailings that exposed patient names to other patients. A statement on their web site explains: In compliance with federal HIPAA and HITECH Regulations, Cancer Care Northwest is required to notify patients and the media when a breach of information occurs. Cancer Care Northwest became aware…
Papers with patient info stolen from Jefferson Center for Mental Health employee's car
Jefferson Center for Mental Health in Colorado recently notified HHS of a breach affecting 546 patients. A statement on their web site explains: On December 13, 2010, a paper list with brief demographic information was stolen from a locked vehicle. The thief stole a purse containing cash and a work bag of a Jefferson Center…