A University of Louisville database of 708 names that included social security numbers and dialysis details was available on the Internet without password protection for nearly 1 ½ years, university officials said Wednesday . The Web site was disabled on May 17 when the university discovered the flaw. University officials said in a statement that…
NY: Medical records found in DMV's dumpster
Eli George reports: Who dumped medical records, containing confidential patient information, at the DMV? These are some of the most sensitive, intimate personal medical records a person can have. A county worker was tossing garbage into the dumpster at the Auto Bureau in Cheektowaga and spotted boxes of files that just didn’t belong there. Erie…
UK: West Berkshire Council takes action after losing children’s personal data
West Berkshire Council is taking remedial action after the Information Commissioner’s Office (ICO) found it in breach of the Data Protection Act (DPA) following the loss of a USB stick containing the sensitive personal information of children and young people. The memory stick, which was unencrypted and not password protected, contained, among other things, information…
Hospice laptop with personal info stolen
Park Ridge-based Rainbow Hospice and Palliative Care is alerting patients after a laptop computer containing patients’ personal information was stolen during a nurse’s home visit in April. The theft occurred April 12 in Chicago, Rainbow Hospice announced publicly last week. The computer contained patient names, addresses, social security numbers, insurance information, medications, treatments and diagnoses,…
Owner and operator of behavioral counseling company convicted of health care fraud
Edward Birts, of Houston, has pleaded guilty to conspiracy to commit health care fraud, health care fraud and aggravated identity theft arising from his role in a health care fraud scheme in which Medicare and Medicaid were fraudulently billed for psychiatric counseling services, U.S. Attorney José Angel Moreno and Texas Attorney General Greg Abbott announced…
Educational Security Incidents Year in Review – 2009
After a hiatus, Adam Dodge’s ESI blog is back, and Adam has published his analysis of education sector breaches in 2009. From his summary: The ESI Year in Review – 2009 examines all of the information security incidents occurring at colleges and universities around the world as reported in the news during 2009. The information…