DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Edgewater Hospital’s Medical Records Found at Abandoned Premises

Posted on September 19, 2013 by Dissent

Nancy Loo reports that more than a decade after its closing, medical records have been found at the abandoned Edgewater Hospital on Chicago’s North side.

A joint WGN – Chicago Tribune investigation has confirmed an extraordinary situation involving medical records at the old hospital.  And as Nancy Loo reports, not only were medical files left behind inside Edgewater after it closed; they’re still there.

[…]

WGN and the Chicago Tribune obtained these photos from a 2009 visit by the State Health Department, a site visit Joe Drantz says was prompted by formal neighborhood complaints. “There’s important information about the records that’s contained in there. Even if it’s not medical.  Social security numbers, credit card numbers, pathology tests.”

[…]

A local adventure seeker, who asked us to disguise her face, describes what she saw just over a year ago.  ”There was a whole room just filled with thousands of patient records.  And when you opened up a file, it said the patient’s name, their date of birth, address, social security number. So, everything you’d need to steal their identity.”  So far, there are no known cases of identity theft linked to the Edgewater files, some of which we spotted just recently from the public sidewalk through a street level window.  Drantz points out where most of the files are located. “The files are in the professional building.”

Read more on WGN.

So the state knew about the problem, but did nothing more after getting a voluntary agreement to remedy the problem in 2009. They never went back because they reportedly got no more complaints from the public.

Is that a satisfactory explanation? There are many situations in which entities fold or die and states become aware of abandoned medical records that could be stolen by anyone. Shouldn’t states have some ultimate responsibility in such cases to protect the public by taking action?


Related:

  • Paying cyberattackers is wrong, right? Should Taos County's incident be an exception? (1)
  • HHS OCR Settles HIPAA Ransomware Investigation with Syracuse ASC for $250k plus corrective action plan
  • Two more entities have folded after ransomware attacks
  • Data breach feared after cyberattack on AMEOS hospitals in Germany
  • Premier Health Partners issues a press release about a breach two years ago. Why was this needed now?
  • Theft from Glasgow’s Queen Elizabeth University Hospital sparks probe
Category: Health Data

Post navigation

← NHC Oak Ridge discloses breach involving unencrypted backup tape
Belfast civil servant offered to sell secret database info to newspaper →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Connex Credit Union notifies 172,000 members of hacking incident
  • Federal judiciary says it is boosting security after cyberattack; researcher finds new leaks (CORRECTED)
  • Bank of America Refused To Reimburse Georgia Customer After Hackers Hit Account. Then a News Station Showed Up.
  • NCERT Issues Advisory on “Blue Locker” Ransomware Targeting Pakistan’s Key Institutions
  • Scattered Spider has a new Telegram channel to list its attacks
  • SC: Spartanburg County hit by cyberattack, some online services disrupted
  • Pakistan Petroleum thwarts ransomware attempt, says no critical data compromised
  • ShinyHunters sent Google an extortion demand; Shiny comments on current activities
  • Air France and KLM alert customers to data breach on external platform
  • Samourai CEO Keonne Rodriguez and Samourai CTO William Lonergan Hill Pled Guilty to Operating a Money Transmitting Business, Samourai Wallet, That Transmitted Over $200 Million in Criminal Proceeds

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Germany’s top court holds that police can only use spyware to investigate serious crimes
  • Flightradar24 receives reprimand for violating aircraft data privacy rights
  • Nebraska Attorney General Sues GM and OnStar Over Alleged Privacy Violations
  • Federal Court Allows Privacy Related Claims to Proceed in a Proposed Class Action Lawsuit Against Motorola
  • Italian Garante Adopts Statement on Health Data and AI
  • Trump administration is launching a new private health tracking system with Big Tech’s help
  • Attorney General James Takes Action to Protect Sensitive Personal Information of Tens of Millions of People

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.