BreachExchange mailing list archives

Hospital where Kim Kardashian had baby reportedly axes employees for hacking her medical records


From: security curmudgeon <jericho () attrition org>
Date: Mon, 15 Jul 2013 00:33:18 -0500 (CDT)



---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.foxnews.com/entertainment/2013/07/14/hospital-where-kim-kardashian-had-baby-reportedly-axes-employees-for-hacking/

FoxNews.com
July 14, 2013

The West Hollywood hospital where Kim Kardashian had baby North has 
reportedly fired half-a-dozen employees for hacking patients? medical 
records, including those of the reality TV star.

The Los Angeles Times reported four of the dismissed Cedars-Sinai Hospital 
workers were employees of physicians in possession of medical staff 
privileges at the facility.  One was a medical assistant employed by the 
hospital and one was an unpaid, student research assistant.

Five of the workers accessed a single patient?s record, while the 
remaining one viewed 14 such files, according to The Times. The security 
breaches reportedly occurred between June 18 and June 24.  Kardashian had 
her baby -- rapper Kanye West is the father -- on June 15.

The Times cites a Cedars-Sinai Hospital spokeswoman as both declining to 
identify exactly whose records were hacked, and also saying the victims 
were duly notified by the hospital about the breach.

Meanwhile, TMZ reports exclusively that Kardashian told the website she 
was, indeed, contacted by the hospital, regarding a breach of security and 
protocol related to her medical records.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://lists.osvdb.org/mailman/listinfo/dataloss

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 


Current thread: