BreachExchange mailing list archives

Johns Hopkins Employee May Have Stolen Patient Data


From: "Julie Friend" <jdfriend () gemstonepartners biz>
Date: Thu, 14 May 2009 14:28:59 -0400

Johns Hopkins is alerting more than 10,000 of its hospital patients that
they may have been victims of identity theft. An investigation suggests a
former employee who worked in patient registration may have been linked to a
scheme to create fake drivers' licenses in Virginia, according to this
letter <http://www.oag.state.md.us/idtheft/Breach%20Notices/ITU-168293.pdf>
from Baltimore-based Hopkins to the Maryland attorney general's office.

Most of the patients are at very low risk, the letter says - they're
included because the former employee accessed their records in the course of
her work. But a few dozen have already been identified as likely victims,
and a few hundred who have Virginia mailing addresses and whose records were
accessed by the former employee may also be at risk. Hopkins is offering
those patients credit monitoring, fraud resolution and identity-theft
reimbursement for certain expenses.

http://blogs.wsj.com/health/2009/05/12/johns-hopkins-employee-may-have-stole
n-patient-data/

 

 

Julie

 

Julie Davis Friend - CITRMS, CIPA

Gemstone Partners

jdfriend () gemstonepartners biz

blog: www.juliefriend.com

_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php

Current thread: