Laptop containing UCSF medical school patient information stolen

A laptop containing sensitive patient information was recently stolen from an employee of the University of California, San Francisco (UCSF) School of Medicine.

How many victims? 4,400.

What type of personal information? Names, medical record numbers, ages and clinical information.

The stolen laptop did not contain any Social Security numbers or financial data.

What happened? The laptop was stolen on Nov. 30. UCSF's police department began an investigation Dec. 1, and the laptop was recovered in Southern California on Jan. 8.

Details: The UCSF Enterprise Information Security department determined that a file on the laptop contained “limited” information for some patients about their treatment at the medical center in 2008 and 2009.

In addition, the laptop also contained files from the employee's prior employer, Beth Israel Deaconess Medical Center in Boston. Those files contained data about Beth Israel patients.

Quote: “There is no indication that unauthorized access to the files or the laptop actually took place,” UCSF said in a statement.

What was the response? The university is alerting affected individuals. In addition, a toll-free number (1-877-809-1270 ext. 74005) was established to provide more information about the breach.

Source: http://sanfrancisco.bizjournals.com/sanfrancisco/, San Francisco Business Times, “UCSF says laptop with 4,400 patient records stolen, then recovered,” Jan. 27, 2010.

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.