Thousands of doctors' details put on web

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2007/12/20/ndocs120.xml

By Rebecca Smith
Medical Editor
20/12/2007

Computer security failures that allowed sensitive personal details of 
junior doctors applying for training posts to be viewed by others were an 
"unacceptable breach of security" by the Department of Health, the 
Information Commissioner has found.

The sensitive details of thousands of doctors, including religious beliefs 
and sexual orientation, could be seen by anyone logging on to the Medical 
Training Application Service site.

The commissioner said the Department of Health had breached the Data 
Protection Act and warned that if it happened again the department would 
be prosecuted.

The findings increase pressure on ministers over the handling of sensitive 
personal data and follows a series of security blunders.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml