BreachExchange mailing list archives

Stolen laptop affects 34K


From: security curmudgeon <jericho () attrition org>
Date: Tue, 3 Apr 2012 01:40:25 -0500 (CDT)



---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.cmio.net/index.php?option=com_articles&view=article&id=33116:stolen-laptop-affects-34k

By Jeff Byers
CMIO.net
April 2, 2012

Washington, D.C.-based Howard University Hospital has sent a letter to 
34,503 patients informing them of a potential disclosure of protected 
health information that occurred in late January.

A former contractor?s personal laptop containing patient information was 
stolen, according to a statement from Larry Warren, CEO of the hospital. 
?This information was downloaded in violation of Howard University 
Hospital policy,? he wrote.

The data varied in the types of information contained, but included some 
or all of the following: names, addresses, Social Security numbers, 
identification numbers, medical record numbers, birthdates, admission 
dates, diagnosis-related information and discharge dates. The information 
primarily covers patients who received treatment at the hospital between 
December 2010 and October 2011, although in some cases the data extend 
back to 2007.

[...]

_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 

Tenable Network Security (http://www.tenable.com/)
Tenable Network Security provides a suite of solutions which unify real-time
vulnerability, event and compliance monitoring into a single, role-based, interface
for administrators, auditors and risk managers to evaluate, communicate and
report needed information for effective decision making and systems management.


Current thread: