Re: Hospital laptop walks away during disaster drill, patient data back to 2000 does, too

[George Toft <george () myitaz com>]

Chris Walsh wrote:
> According to the letter, a copy of which was obtained by the Journal,
> the computer was password protected and there is "no evidence that
> the hard drive has been inappropriately accessed.''

It takes about 3 minutes to change the Administrator password (10 if 
it's your first time) using a common tool found on the Internet if you 
have physical access to the Windows PC.  And without possession of the 
laptop, how can they state that the hard drive has not been accessed in 
any fashion, appropriate or inappropriate?

George Toft, CISSP, MSIS
My IT Department
www.myITaz.com
480-544-1067

Confidential data protection experts for the financial industry.


_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/errata/dataloss/