BreachExchange mailing list archives

Found computer drive had Mercy patient data on it


From: lyger <lyger () attrition org>
Date: Fri, 15 Sep 2006 11:01:59 -0400 (EDT)


http://www.mercedsunstar.com/local/story/12717958p-13413952c.html

By Carol Reiter
Last Updated: September 15, 2006, 01:54:07 AM PDT

A computer memory card with 295 patient names, Social Security numbers, 
birthdates and medical record numbers was lost by a Mercy Medical Center 
Merced employee and found months after the card was created.

Because of the possibility that someone could have accessed the 
unencrypted small memory card, all of the patients were notified Wednesday 
by certified mail that their privacy may have been invaded. Only one 
patient's actual medical record was on the card.

Robert McLaughlin, spokesman for Mercy, said the card was created in 2005 
when computer files of Mercy's two campuses, Dominican and Community, were 
being combined into a new computer database.

The employee, who worked in the information technology department of 
Mercy, created the card to find out what the best way to access patient 
records was: by name, date of birth or Social Security number.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 146 million compromised records in 349 incidents over 6 years.



Current thread: