Dissent’s Articles at DataBreaches.net, Page 2

Dissent

Contra Costa Health Plan notifying patients after discovering contractor had used falsified identity to get contract

Posted by Dissent at 11:57 am Health Data, Subcontractor, U.S.

Dec 142018

It seems Contra Costa Health Plan discovered that a contractor that they had hired and who had access to EHR beginning on December 1, 2014 had used a falsified identity to get the contractor position. The position involved access to EHR as part of the contractor’s functions relating to utilization management.

In a letter to those affected, Frank Lee, J.D., Director of Compliance and Government Relations, writes that CCHP has no indication that the contractor misused the information that she accessed, but under the circumstances, they are notifying everyone whose records she might have accessed. The number of patients is not indicated in CCHP’s sample notification letter, which is reproduced below. The incident is not yet up on HHS’s breach tool, although I imagine we will see it there eventually.

CCHP-CA-AG-Breach_0

AU: Thousands affected in ActewAGL and Icon Water mail-out privacy breach

Posted by Dissent at 7:06 am Business Sector, Exposure, Non-U.S., Paper

Dec 142018

Jasper Lindell reports:

ActewAGL has confirmed 400 electricity, gas and water customers have received bundles of bills addressed to other utility customers in a massive privacy breach affecting 6000 customers in the ACT and NSW.

ActewAGL notified the Privacy Commissioner of the breach after it became aware of the mistake on Wednesday and had set up a taskforce by Friday afternoon to respond to affected customers.

Ca: Hundreds of N.W.T. health records found at Fort Simpson dump

Posted by Dissent at 7:05 am Exposure, Government Sector, Health Data, Non-U.S., Of Note, Paper

Dec 142018

Hilary Bird reports:

An N.W.T man says he found hundreds of confidential medical records at the Fort Simpson dump.

The documents contain detailed information about patients’ mental health and history of drug use, including applications to addictions treatment facilities, progress reports from those facilities, and detailed notes from one-on-one counselling sessions.

The documents, many of which were on N.W.T. government letterhead, also included social insurance, treaty and health card numbers.

Hackers fooled Save the Children into sending $1 million to a phony account

Posted by Dissent at 7:00 am Hack, Miscellaneous, U.S.

Dec 142018

Todd Wallack reports:

Save the Children Federation, one of the country’s best-known charities said it was the victim of a $1 million cyberscam last year.
The Connecticut-based nonprofit said hackers broke into a worker’s e-mail, posed as an employee, and created false invoices and other documents, to fool the charity into sending nearly $1 million to a fraudulent entity in Japan. The con artists claimed the money was needed to purchase solar panels for health centers in Pakistan, where Save the Children has worked for more than 30 years.

Personal information of 541k individuals has been stolen from an emergency contact database after the website of the French Ministry of Europe breached

Posted by Dissent at 4:43 pm Government Sector, Hack, Non-U.S.

Dec 132018

Sergiu Gatlan reports:

According to the Ministry’s public statement, the hackers managed to get their hands on the names, phone numbers, and email addresses of all people who had an account on the French Ariane emergency contact database.
The platform is used by the French Ministry of Europe and Foreign Affairs to allow citizens traveling abroad to received security updates in case of emergency.
“Personal data recorded during registration on the Ariane platform have been stolen,” says the Ministry’s statement.