[ISN] N.L. police probe security breach of patient information

From: InfoSec News (alerts@private)
Date: Sun Nov 25 2007 - 23:06:39 PST


http://www.cbc.ca/canada/newfoundland-labrador/story/2007/11/24/security-breach.html

CBC News 
November 24, 2007 

Officials in Newfoundland and Labrador are investigating a computer 
security breach involving sensitive patient information that may have 
been accessed through the internet.

The data, including lab test results for infectious diseases such as HIV 
and hepatitis along with patient names and health numbers, was stored on 
a government desktop computer, said Health Minister Ross Wiseman.

The computer was unplugged and taken to the home of a consultant working 
for the Provincial Public Health Laboratory, something Wiseman said 
should never have happened.

"That was an inappropriate use. Obviously individual computers that are 
available for work are there for the workplace only," he told CBC News.

On Friday, Attorney General Jerome Kennedy called the security lapse a 
"very serious matter that required immediate action" to determine 
whether there has been "any illegal activity or hacking."

On Tuesday night, someone claiming to be a computer security specialist 
from somewhere outside the province called the consultant and said they 
were able to access the data.

Kennedy said it's unclear how many people's private medical information 
may have been exposed.

The government has hired a computer security firm to lead its 
investigation and has asked its own chief information officer to 
determine the scope of the breach and how it could have happened.

Copyright CBC 2007


__________________________________________________________________      
Visit InfoSec News
http://www.infosecnews.org/



This archive was generated by hypermail 2.1.3 : Sun Nov 25 2007 - 23:18:06 PST