BreachExchange mailing list archives

58 Saskatchewan patients had health data breached: Province


From: Erica Absetz <eabsetz () opensecurityfoundation org>
Date: Fri, 15 Feb 2013 11:38:58 -0500

http://www.sunnewsnetwork.ca/sunnews/canada/archives/2013/02/20130215-092226.html

Nearly 60 Saskatchewan residents had their private health information
accessed when the records were shown to students at a Regina college,
the province said.

Saskatchewan's Ministry of Health said Thursday the Office of the
Information and Privacy Commissioner is investigating the privacy
breach.

Up 140 students viewed the data in a health management course at the
Saskatchewan Institute of Applied Science and Technology beginning in
2005-06, the ministry said.

The province informed the 58 patients whose information was involved
and told the college to stop using the file.

"The ministry understands that in the instructional setting,
individual personal health information would not likely have been
accessed or viewed; however, it was a part of the source file used to
show aggregate data by age, gender and region," the province said in a
statement.

It is not clear how the college obtained the private health records.
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 

Tenable Network Security (http://www.tenable.com/)
Tenable Network Security provides a suite of solutions which unify real-time
vulnerability, event and compliance monitoring into a single, role-based, interface
for administrators, auditors and risk managers to evaluate, communicate and
report needed information for effective decision making and systems management.


Current thread: