Company laptop mysteriously turns up at repair shop

The personal information of thousands of workers at Sutter Health in Sacramento, Calif. may be at risk after a company laptop inexplicably turned up at a computer repair shop.

How many victims? 6,000.

What type of personal information? Names and Social Security numbers of employees.

What happened? Sutter thought the laptop was in an employee’s possession since 2007. But in May, a computer repair business contacted the health care company saying they had the hard drive and returned it to Sutter.

Details: A forensic analysis revealed the computer repair business opened the sensitive file but the repair shop wrote a certified letter stating it didn't retain any of the information.

Quote: "The repair people did the right thing and told us they had our laptop,"  Kami Lloyd, communication coordinator at Sutter told News 10.

What was the response? In the future, all data on company laptops will be encrypted. In addition, employees were told to save files and documents to network drives instead of on PC hard drives. Finally, Sutter said it will begin to track the disposal of old computers.

Sutter is providing affected individuals with free identity theft protection for one year.

Source: news10.net, News 10 ABC, “Missing Laptop Contained Sutter Workers Data,” June 30, 2009.
close

Next Article in The Data Breach Blog

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.