Patient Data Posted Online in Major Breach of Privacy

Gerald · 09-09-11, 12:20 PM

A medical privacy breach led to the public posting on a commercial Web site of data for 20,000 emergency room patients at Stanford Hospital in Palo Alto, Calif., including names and diagnosis codes, the hospital has confirmed. The information stayed online for nearly a year.

Since discovering the breach last month, the hospital has been investigating how a detailed spreadsheet made its way from one of its vendors, a billing contractor identified as Multi-Specialty Collection Services, to a Web site called Student of Fortune, which allows students to solicit paid assistance with their schoolwork.

Gary Migdol, a spokesman for Stanford Hospital and Clinics, said the spreadsheet first appeared on the site on Sept. 9, 2010, as an attachment to a question about how to convert the data into a bar graph.

Although medical security breaches are not uncommon, the Stanford breach was notable for the length of time that the data remained publicly available without detection.

Even as government regulators strengthen oversight by requiring public reporting of breaches and imposing heavy fines, experts on medical security said the Stanford breach spotlighted the persistent vulnerability posed by legions of outside contractors that gain access to private data.

http://www.nytimes.com/2011/09/09/us...me&ref=general

Note: September 8, 2011

Dowly · 09-09-11, 12:30 PM

A year?!

Gerald · 09-09-11, 01:18 PM

Yes, apparently .... long time

Gargamel · 09-09-11, 02:23 PM

Apparently nobody really cared enough either way to notice.

Jimbuna · 09-09-11, 04:22 PM

Data protection...not at its best.

09-09-11, 12:20 PM	#1
Gerald SUBSIM Newsman Join Date: May 2008 Location: Close to sea Posts: 24,254 Downloads: 553 Uploads: 0	Patient Data Posted Online in Major Breach of Privacy A medical privacy breach led to the public posting on a commercial Web site of data for 20,000 emergency room patients at Stanford Hospital in Palo Alto, Calif., including names and diagnosis codes, the hospital has confirmed. The information stayed online for nearly a year. Since discovering the breach last month, the hospital has been investigating how a detailed spreadsheet made its way from one of its vendors, a billing contractor identified as Multi-Specialty Collection Services, to a Web site called Student of Fortune, which allows students to solicit paid assistance with their schoolwork. Gary Migdol, a spokesman for Stanford Hospital and Clinics, said the spreadsheet first appeared on the site on Sept. 9, 2010, as an attachment to a question about how to convert the data into a bar graph. Although medical security breaches are not uncommon, the Stanford breach was notable for the length of time that the data remained publicly available without detection. Even as government regulators strengthen oversight by requiring public reporting of breaches and imposing heavy fines, experts on medical security said the Stanford breach spotlighted the persistent vulnerability posed by legions of outside contractors that gain access to private data. http://www.nytimes.com/2011/09/09/us...me&ref=general Note: September 8, 2011 __________________ Nothing in life is to be feard,it is only to be understood. Marie Curie

09-09-11, 01:18 PM	#3
Gerald SUBSIM Newsman Join Date: May 2008 Location: Close to sea Posts: 24,254 Downloads: 553 Uploads: 0	Yes, apparently .... long time __________________ Nothing in life is to be feard,it is only to be understood. Marie Curie

09-09-11, 02:23 PM	#4
Gargamel Lucky Sailor Join Date: Oct 2010 Location: Rome Posts: 4,273 Downloads: 81 Uploads: 0	Apparently nobody really cared enough either way to notice. __________________ Luck is a residue of Design.

09-09-11, 04:22 PM	#5
Jimbuna Chief of the Boat Join Date: Feb 2006 Location: 250 metres below the surface Posts: 190,539 Downloads: 63 Uploads: 13	Data protection...not at its best. __________________ Wise men speak because they have something to say; Fools because they have to say something. Oh my God, not again!!

09-09-11, 12:30 PM	#2
Dowly Lucky Jack Join Date: Apr 2005 Location: Finland Posts: 25,052 Downloads: 32 Uploads: 0	A year?!