Welcome to the Nexus of Ethics, Psychology, Morality, Philosophy and Health Care

Welcome to the nexus of ethics, psychology, morality, technology, health care, and philosophy
Showing posts with label Social Security Numbers. Show all posts
Showing posts with label Social Security Numbers. Show all posts

Tuesday, April 7, 2015

Premera Blue Cross Breach May Have Exposed 11 Million Customers' Medical And Financial Data

By Kate Vinton
Forbes
Originally published March 17, 2015

Medical and financial data belonging to as many as 11 million Premera Blue Cross customers may have been exposed in a breach discovered on the same day as the Anthem breach, the health insurance company announced Tuesday.

Premera discovered the breach on January 29, 2015. Working with both Mandiant and the FBI to investigate the attack, the company discovered that the initial attack occurred on May 5, 2014. Premera Blue Cross and Premera Blue Cross Blue Shield of Alaska were both impacted, in addition to affiliate brands Vivacity and Connexion Insurance Solutions. Additionally, other Blue Cross Blue Shield customers in Washington and Alaska may have been affected by the breach.

The entire article is here.

Monday, March 26, 2012

TRICARE Breach Victims Report Fraud

8 Class Action Lawsuits Pending
Consolidation Sought


By Howard Anderson

In the weeks following last year's TRICARE health information breach, some of the 4.9 million beneficiaries affected became victims of financial fraud tied to their credit cards or banking accounts. That new detail is included in an amended complaint tied to the original classaction lawsuit filed in the case, which claims the financial fraud is related to the breach incident.

Eight class action lawsuits have now been filed in the wake of the case. The breach involved the theft of unencrypted computer tapes containing personal information, including Social Security numbers, but not financial data, about TRICARE beneficiaries, officials with the military health program said last year. 

Wednesday, October 5, 2011

IU medical school warns thief may have gained access to patient data of 3,000 people

The Chicago Tribune, as cited from The Associated Press

INDIANAPOLIS (AP) — The Indiana University School of Medicine says a thief who stole a physician's laptop computer may have gained access to the confidential patient information of more than 3,000 people.

The news release can be found here.

Friday, September 16, 2011

Info dump yields $40K settlement

By Bryan Cohen
Legal Newsline


North Carolina Attorney General Roy Cooper announced on Wednesday that a Charlotte doctor has paid $40,000 for allegedly dumping files that contained patients' financial and medical information. 

Dr. Ervin Batchelor owns and operates the Carolina Center for Development and Rehabilitation, which is a psychological testing and treatment facility located in Charlotte. In June 2010, the facility allegedly disposed of 1,000 patient files illegally by dumping them at the West Mecklenburg Recycling Center.

The files allegedly contained health information, insurance account numbers, drivers' license numbers, Social Security numbers, dates of birth, addresses and names for 1,600 people.

"Any business you entrust with your information has a duty to keep it safe," Cooper said. "Sensitive financial and health information should never be carelessly dumped, putting customers and patients at risk of identity theft."

Under a state law Cooper pushed through the General Assembly in 2005, businesses that dispose of records containing personal identifying information must destroy or shred those records so that identity thieves can't retrieve information from discarded files that have been carelessly thrown away. Medical records also face added restrictions under federal health privacy laws.

The Carolina Center records were recovered by Mecklenburg County, N.C., officials, who contacted Cooper's office.

As part of a settlement, Batchelor paid $40,000 and agreed to abide by both federal and state laws that protect people's personal financial and health information.

The Carolina Center has already notified the patients whose information was placed at risk. State law requires businesses, as well as state and local government agencies, to notify consumers if a security breach may have put their personal information at risk. The breaches of security must also be reported to the Consumer Protection Division. Since state laws on security breaches took effect in 2005 and 2006, a total of 889 breaches involving information and more than 3.3 million state consumers have been reported.

Cooper's CPD has won settlements in multiple other document dumping cases, including against a Gastonia, N.C., movie rental store, two mortgage lenders from the Charlotte area and a Greensboro, N.C., urgent care clinic.