Insider

UK: Former health adviser found guilty of illegally accessing patient records

The Information Commissioner’s Office announced: A former health adviser has been found guilty of accessing medical records of patients without a valid legal reason. Christopher O’Brien, 36, was working at the South Warwickshire NHS Foundation Trust when he unlawfully accessed the records of 14 patients, who were known personally to him, between June and December...

Spanish Police Arrest Alleged Radioactive Monitoring Hackers

Danny Bradbury reports: Police in Spain have arrested two people on suspicion of hacking the country’s Radioactivity Alert Network (RAR). The RAR, operated by Spain’s General Directorate of Civil Protection and Emergencies, is a network of gamma radiation sensors. It monitors parts of Spain – which operates nuclear power plants – for excessive radiation....

Treating Healthcare’s Insider Threat

Gabriel Avner writes: There’s an old joke about why bank robbers rob banks. Because that’s where the money is. Given the valuable assets under their care, banks, fintech, insurance, and other financial institutions have understood that they have to take special care to avoid data breaches and other threats. But if the past week’s...

Ca: How the court bolstered an insurer’s exclusion for privacy breach

David Gambrill reports: Acting recklessly in breaching the confidential medical files of patients effectively falls within a hospital insurer’s commercial policy exclusion for committing an ‘intentional act,’ Ontario’s top court has ruled. The Ontario Court of Appeal found a hospital insurer, the Healthcare Insurance Reciprocal of Canada, does not have a duty to defend...

WY: Former Employee Inappropriately Accessed Cheyenne Regional Medical Center Patient Health Records

Phoenixville Hospital was just one of two reports this week involving employees behaving badly by accessing patient files without a legitimate purpose. On July 6, Cheyenne Regional Medical Center in Wyoming revealed that a former employee had inappropriately accessed several patients’ personal health records between August 31, 2020, and May 26, 2022. In this...