Category Archives: Data Protection & Privacy Breaches

CMC Inquiry hears how “huge mistakes” were made

Recordkeeping practices at Queensland’s Crime and Misconduct Commission (CMC) remain in the spotlight at the ongoing Parliamentary inquiry into the release of sensitive documents from the Fitzgerald Inquiry, the landmark 1980s investigation into into state police corruption. A public inquiry … Continue reading

Posted in Data Protection & Privacy Breaches, Inadequate Systems, Operational Failures | Tagged | Comments Off

Inquiry call over missing NHS records

More than 100 health records – almost half of them in NHS Grampian – went missing in Scotland last year. The 104 files included personal details of children and sensitive health information, according to details in a Freedom of Information … Continue reading

Posted in Data Protection & Privacy Breaches, Inappropriate Disposal or Destruction | Tagged , | Leave a comment

Emory Healthcare says 315,000 patient records missing, data compromised

ATLANTA—Emory Healthcare announced this week that backup disks containing approximately 315,000 patient records had gone missing from a storage location at Emory University Hospital. In a statement released Thursday, the Atlanta-based health care system said there had not been any … Continue reading

Posted in Data Protection & Privacy Breaches, Inadequate Systems | Tagged | Leave a comment

Lost data may have exposed 800,000 people in Calif (US)

LOS ANGELES — A disaster preparedness exercise to ensure California’s child support system could be run remotely went smoothly, except for one casualty: the names, Social Security numbers and other private records of about 800,000 adults and children. Four computer … Continue reading

Posted in Data Protection & Privacy Breaches | Tagged | Leave a comment

RCMP databases have ‘disturbing gaps’ in managing personal information records (CAN)

Canada’s privacy commissioner says she has found “disturbing gaps” in the way the RCMP manages sensitive information in some of its databases, including records related to pardoned offences. Privacy watchdog Jennifer Stoddart’s findings are contained in an audit report released … Continue reading

Posted in Data Protection & Privacy Breaches, Inadequate Systems | Tagged , , | Leave a comment

Telstra customer database exposed

Bundle account holders’ details unbundled in public. Detailed information about Telstra’s customer accounts – including usernames and passwords – has been found to be sitting on the open web for anyone to access via a Google search. A user of … Continue reading

Posted in Data Protection & Privacy Breaches, Inadequate Systems | Tagged | Leave a comment

No child welfare excuses / End to privatization urged (US)

LINCOLN — Gov. Dave Heineman acknowledged Thursday that Nebraska’s initiative to privatize child welfare services has “not gone as well as anyone would like.” …  Heineman’s comments were his first since State Auditor Mike Foley released a scathing report on … Continue reading

Posted in Data Protection & Privacy Breaches, Exposed through audit, Inadequate Systems, Incomplete records, Operational Failures | Tagged | Leave a comment

Cash records, email suggest Coulson knew of bribes: source (UK)

 LONDON (Reuters)- Scotland Yard investigators have cryptic financial records corroborating suspicions that former News of the World editor Andy Coulson knew about illegal payments to police officers, a source with knowledge of the matter told Reuters. The cash records tally … Continue reading

Posted in Data Protection & Privacy Breaches | Tagged | Leave a comment

Victorian WorkSafe agents slammed in new ombudsman report (AUS)

The Victorian Ombudsman has handed down a scathing report on the state’s WorkSafe agencies, noting numerous privacy breaches and delays in payments as a result of poor record keeping practices. The report into record keeping practices has made a number … Continue reading

Posted in Breakdowns in Accountability, Data Protection & Privacy Breaches, Inadequate Systems, Non-compliance | Tagged | Leave a comment

Worst-case projected cost of Epsilon breach: $4B

The ultimate fee for the data breach last month at email service provider Epsilon could reach as high as $4 billion, depending on what becomes of the data that was stolen, according to a cyber-risk advisory firm. ComputerWorld, May 1, … Continue reading

Posted in Data Protection & Privacy Breaches, Financial loss | Tagged | Leave a comment

Overwhelmed by Data Breaches

With Lest We Forget we look for incidents where records management has significantly to operational or system failure. And while most data protection and privacy breaches meet our selection criteria, the number of breaches is now so great that to record them … Continue reading

Posted in Data Protection & Privacy Breaches | Leave a comment

Data breach is the Exxon Valdez of privacy

Last week’s Epsilon data breach is the Exxon Valdez of privacy. It is a wake-up call that it is time to reform our privacy infrastructure from the ground up, much as the Exxon Valdez oil spill of 1989 should have … Continue reading

Posted in Data Protection & Privacy Breaches, Inadequate Systems, Systemic failure | Tagged | Leave a comment

Health Insurance Provider Health Net Loses 1.9 Million Records (US)

Health Net, IBM Lose Drives with Stored Customer Records Managed health care provider Health Net said this week that “several” server drives managed by IBM had gone missing, putting possibly 1.9 million records containing the personal information of its customer … Continue reading

Posted in Data Protection & Privacy Breaches | Tagged | Leave a comment

Honda Data Breach Highlights Need to Set Strong Cloud Security Policies (US)

In light of recent data breaches, including a December 2010 incident which affected 2.2 million Honda customers, IT managers need to limit what data is actually shared with cloud service providers…There are many benefits of the cloud, but “all that … Continue reading

Posted in Data Protection & Privacy Breaches | Tagged | Leave a comment

Ongoing issues with data loss in the UK

Firms breaching data protection A “horrifying” number of companies, government departments and other public bodies have breached data protection rules in the past year, a report says. The UK’s Information Commissioner Richard Thomas said bosses must take the personal data … Continue reading

Posted in Breakdowns in Accountability, Data Protection & Privacy Breaches, Inadequate Systems, Non-compliance | Tagged , , , | Leave a comment

Second Veterans Affairs Computer Missing (US)

Another Department of Veterans Affairs computer is missing — this one containing the personal information of as many as 38,000 patients at VA hospitals in Pennsylvania, the department said yesterday. The FBI and the VA inspector general are investigating the … Continue reading

Posted in Data Protection & Privacy Breaches | Tagged | Leave a comment

24 ATO staff sacked over privacy breaches

The Australian Taxation Office has taken action against twenty-four of its staff members for inappropriately accessing client files last financial year, with another three recently under investigation. ATO spokesperson Anne Ellison said the ATO had installed a system to monitor … Continue reading

Posted in Data Protection & Privacy Breaches | Leave a comment

Police doctor left confidential documents at public bin (UK)

Dr Kameran Kader, a former surgeon at the Charles Cross Police Station in Plymouth was accused of misconduct after he left some 700 confidential documents ripped up by a bin in the Lidget Green area of Bradford. The discovered documents … Continue reading

Posted in Data Protection & Privacy Breaches, Inadequate Systems, Inappropriate Disposal or Destruction | Tagged , | Leave a comment

Patient records found on road

Acorn Healthcare Services are in hot water after client records containing private medical information meant to be binned and shredded were found scattered alongside a busy road. The papers disclosed names, ages, dates of birth, addresses and medical conditions such … Continue reading

Posted in Data Protection & Privacy Breaches, Inappropriate Disposal or Destruction | Leave a comment

Patients’ Private Records Found In Dumpster (US)

Medical records were left in and around garbage bins outside a shopping centre in Detroit. The medical facility involved stated that the records were housed at a secure storage facility and were supposed to have been destroyed. The medical centre … Continue reading

Posted in Data Protection & Privacy Breaches, Inappropriate Disposal or Destruction | Tagged | Leave a comment