Investigation into South Australia's Medvet lab after serious privacy breach

[InfoSec News <alerts () infosecnews org>]

http://www.news.com.au/national/south-australias-medvet-blood-lab-publishes-details-of-paternity-and-drug-test-applicants/story-e6frfkx9-1226096476780

By Sarah Martin
The Advertiser
July 18, 2011

THE South Australian Government has ordered an urgent investigation into 
its medical laboratory, Medvet, over a privacy bungle.

The security breach, which resulted in the online publishing of the 
personal details of people seeking paternity and drug tests, has also 
opened the door to legal action against the SA Government, or for 
individual compensation claims.

Customer invoices from Medvet, which is wholly owned by SA Health, were 
still accessible on the internet yesterday, revealing the addresses and 
product orders of hundreds of people.

Most invoices are for personal drug and paternity tests, which Medvet 
sells for up to $770, while claiming "privacy and confidentiality is our 
priority".

[...]


___________________________________________________________
Attend Black Hat USA 2011, hosted at Caesars Palace in
Las Vegas, Nevada July 30-Aug 4, offering over 60 training
sessions and 9 tracks of Briefings from security industry elite.
To sign up visit: http://www.blackhat.com