Hospital patient data on contractor's laptop stolen

A laptop containing sensitive data on patients, employees and physicians from Sutter Lakeside Hospital in Lake County, Calif. was stolen from a contractor's home.

How many victims? 45,000.

What kind of personal information? Names, addresses, phone numbers, birth dates and Social Security numbers. In some cases, the data included billing and diagnosis information.

What happened?The contractor, who was performing an equipment upgrade, violated hospital policy when he downloaded the data onto the hard drive of a laptop.

What was the response?The hospital mailed notification letters to the victims. In addition, it plans to provide additional training to managers, conduct audits of portable devices and re-evaluate its security polices.

Details: The laptop was password protected but not encrypted. The hospital now plans to encrypt all of its computers. The contractor was fired.

Quote: "We work in an environment where protecting individuals' information is absolutely as important as providing quality service and care. Storing this type of information on a laptop hard drive is at variance with our organization's strict policies." - Hospital CEO Kelly Mather

Source: RecordBee.com, The Record-Bee (Calif.), "Stolen laptop holds private information," Dec. 10.

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.