Sandra Yin reports on recent VA disclosures of breaches. I had covered the August report here, but her coverage makes some interesting points; Paper is much more problematic than electronic data, according to Veterans Affairs CIO Roger Baker. [which is why all state and federal mandatory disclosure laws should include paper records — Dissent!] Here’s…
Over 23,000 patients notified in three breaches reported to HHS
In looking at the most recent update to HHS’s web site, I noted three other breaches that we did not know about already from other sources: The Kent Center The Kent Center in Rhode Island reported that paper records of 1,361 patients were stolen in July. In a notification linked from the homepage of their…
Update on Town of Essex Youth Commission breach
Earlier this month, this blog covered a breach involving the Town of Essex in Massachusetts. At the time, I found the statement by the selectmen a bit curious and had asked, “Do the selectmen suspect that someone associated with the program or commission removed the records? I wonder what kind of “legal action” they have…
Records stolen from LabCorp Patient Service Center
LabCorp Patient Service Center in California notified Health & Human Services (HHS) that 507 patients were affected by theft of their protected health information. The records were in paper format, and were reportedly stolen on or about August 2. I do not see any statement on LabCorp’s web site. The company has a number of…
23% of university students have hacked into an IT system
A good education is so important. Carrie Ann-Skinner reports: Nearly a quarter (23 percent) of university students have successfully hacked into IT systems, says Tufin Technologies. Research by the security firm revealed that of those that successfully hacked into a system, 40 percent were over 18. While 84 percent of students surveyed said they knew…
Data Breaches – Who Really Loses
Rafal Los blogs on Digital Soapbox – Down the Security Rabbit Hole! about who really pays the fines when a hospital is fined as a result of a data breach: When information is lost, the first thought often is to fine, fine, and fine again these institutions we find to be negligent in either securing their patient’s…