DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

UK: Private medical records for sale

Posted on October 17, 2009 by Dissent

Jo Macfarlane reports:

The confidential medical records of patients treated at one of Britain’s top private hospitals have been illegally sold to undercover investigators.

Hundreds of files containing intimate details of patients’ conditions, home addresses and dates of birth are being offered for as little as £4 each.

The files were sold by two men who claimed to have gained access to the information from IT companies in India, where thousands of British medical records are sent every year to be computerised.

They supplied more than 100 records belonging to UK patients but claimed they would be able to pass on hundreds of thousands more on demand.

[…]

The London Clinic said it dealt with its own files internally and did not send them to private companies.

But it admitted advising a group of consultants to use a specialist Buckingham-based IT company, DGL Information Technologies UK, with which the clinic has a contract, to help turn paper records into computerised files.

It is believed that these were the files eventually sold to the ITV investigators.

DGL itself did not handle the records but recommended that the doctors use a document-scanning service provided by a company it has a contract with, Scanning And Data Solutions, which operates from a residential address near Berkhamsted, Hertfordshire.

Scanning And Data Solutions collected the paper records from doctors at the London Clinic and scanned them into computers in the UK.

However, it then sub-contracted further work on the files – which involved putting them in order on a database – to a company in Pune, India.

Read more in The Daily Mail.


Related:

  • PowerSchool commits to strengthened breach measures following engagement with the Privacy Commissioner of Canada
  • Hungarian police arrest suspect in cyberattacks on independent media
  • Two more entities have folded after ransomware attacks
  • British institutions to be banned from paying ransoms to Russian hackers
  • Data breach feared after cyberattack on AMEOS hospitals in Germany
  • Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks
Category: Breach IncidentsHealth DataNon-U.S.Of NoteSubcontractorUnauthorized Access

Post navigation

← Debit card breach is traced to Cheers Liquor Mart
When 2+2 Equals a Privacy Question →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Connex Credit Union notifies 172,000 members of hacking incident
  • Federal judiciary says it is boosting security after cyberattack; researcher finds new leaks (CORRECTED)
  • Bank of America Refused To Reimburse Georgia Customer After Hackers Hit Account. Then a News Station Showed Up.
  • NCERT Issues Advisory on “Blue Locker” Ransomware Targeting Pakistan’s Key Institutions
  • Scattered Spider has a new Telegram channel to list its attacks
  • SC: Spartanburg County hit by cyberattack, some online services disrupted
  • Pakistan Petroleum thwarts ransomware attempt, says no critical data compromised
  • ShinyHunters sent Google an extortion demand; Shiny comments on current activities
  • Air France and KLM alert customers to data breach on external platform
  • Samourai CEO Keonne Rodriguez and Samourai CTO William Lonergan Hill Pled Guilty to Operating a Money Transmitting Business, Samourai Wallet, That Transmitted Over $200 Million in Criminal Proceeds

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Germany’s top court holds that police can only use spyware to investigate serious crimes
  • Flightradar24 receives reprimand for violating aircraft data privacy rights
  • Nebraska Attorney General Sues GM and OnStar Over Alleged Privacy Violations
  • Federal Court Allows Privacy Related Claims to Proceed in a Proposed Class Action Lawsuit Against Motorola
  • Italian Garante Adopts Statement on Health Data and AI
  • Trump administration is launching a new private health tracking system with Big Tech’s help
  • Attorney General James Takes Action to Protect Sensitive Personal Information of Tens of Millions of People

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.