Simon Says – Musings of a Technology CTO

This week, Network World posted an interesting slide show of some notable breaches of Health Record privacy from 2009. The mode of disclosure is telling, with internal misuse/fraud and stolen devices/media being prevalent.

http://www.networkworld.com/slideshows/2009/090209-health-breaches.html

The companies mentioned are:

Virgnia.gov – April 30th 2009, 8,257,378 records – Database stolen by hackers and offered for ransom for $10m

Peninsula Orthopedic Associates, March 25 2009, 100,000 records – 3 backup tapes stolen

UC San Diego Health Services, July 16 2009, 30,000 records – Hacked data

Moses Cone Health, March 9 2009, 14,380 records – Stolen Laptop

Johns Hopkins Medicine, April 3 2009, 10,200 records – Internal Fraud

Walgreens, March 18th 2009, 28,000 records – Plain text email attachment

Marian Medical Center, April 22 2009, 3,200 records – Stolen Blackberry

Mrecord, Feb 19 2009, 1,000 – Indian outsourcing firm posted data on its website

Kanawah Charleston Health Dept, Jan 20 2009, 1,000 records – Internal Fraud

Kaiser Permanente, Jan 2009, 5 records – $250,000 fine for 4 incidences if inappropriate viewing of records, and $187,500 for a further incident