Site flaw puts patient data on Google

[InfoSec News <alerts () infosecnews org>]

http://www.healthcareitnews.com/news/site-flaw-puts-patient-data-google

By Erin McCann
Associate Editor
Healthcare IT News
August 9, 2013

The protected health information of some 32,000 patients across 48 states 
has been compromised after a health IT vendor's firewall was down for more 
than a month, allowing, in some cases, for patient data to be indexed by 
Google, officials announced Thursday.

Hospitalist and intensivist company Cogent Healthcare, based in Nashville, 
Tenn., contracted with Las Vegas-based medical transcription and software 
vendor M2ComSys to transcribe care notes dictated by physicians. M2 stored 
protected health information on what was supposed to be a secure Internet 
site. The site, in reality, had its firewall down. The access to these 
notes through the site began May 5, 2013, and ended following Cogent 
Healthcare’s discovery of the lapse on June 24, 2013.

Patient data compromised included patients names, physician names, dates 
of birth, diagnosis description, treatment data, medical history and 
medical records numbers.

[...]

--
Find the best InfoSec talent without breaking your budget!
Post a Job! $99 for 31 days
http://www.hotinfosecjobs.com/