Breach Incidents

Update: Virginia Health Data Potentially Held Hostage

Thomas Claburn of InformationWeek reports: An extortion demand posted on WikiLeaks seeks $10 million to return over 8 million patient records and 35 million prescriptions allegedly stolen from Virginia Department of Health Professions. The note reads: “ATTENTION VIRGINIA I have your sh**! In *my* possession, right now, are 8,257,378 patient records and a total...

Ohio Heritage Bank replaces cards due to HPY breach (updated)

Heartland Payment Systems may be back in VISA’s good graces as PCI-Compliant, but the impact of the breach continues to emerge. Leonard Hayhurst of Coshocton Tribune reports that Ohio Heritage Bank was alerted over the weekend that 800 debit cards   were compromised due to the breach.  Of the 800 cards,  15 showed fraudulent...

Ca: Teacher web site exposes student info

Kate Adams of BayToday reports that a Widdifield Secondary School teacher’s web site exposed student information including contact information and Ontario Health Insurance Program numbers.  An investigation revealed that the information was only exposed briefly and that there were only a few “hits.” The school board was able to ascertain the IPs of those...

UK: Stolen laptops held details of 10,000

Amanda Crook of The Manchester Evening News reports that the paper learned of two more breaches involving NHS  by using Freedom of Information requests: Two laptops containing patient data were stolen during break-ins  at The Christie. The laptops contained names, hospital numbers, some addresses and test results. A computer with the names, addresses, dates...