Computerworld
Quick Menu
Search



Ads by TechWords

See your link here


Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Update: Kaiser Permanente patient data exposed online

The company is pointing a finger at a former employee
Linda Rosencrance   Today’s Top Stories   or  Other Privacy Stories  
 

Sign up to receive Privacy Resource Alerts

March 16, 2005 (Computerworld) -- A disgruntled former employee at Kaiser Permanente, a health maintenance organization in Oakland, Calif., posted a link to a Web site containing the personal information of 140 Kaiser patients -- an effort, she said, to call attention to a potential breach of privacy laws by the company.
The company had sought a restraining order in Alameda County Superior Court against the woman, Elisa D. Cooper, who posted the information on her Web log, according to Kaiser spokesman Matthew Schiffgens. That request was turned down, but another hearing on the matter is set for March 23.
Schiffgens said Cooper, also known as the "Diva of Disgruntled," continued to post the information despite a cease-and-desist request from Kaiser, which learned about her allegations in January from the U.S. Office of Civil Rights -- the enforcement arm under the Health Insurance Portability and Accountability Act. The federal agency began looking into the matter after the woman filed a complaint with it.
The company is investigating whether it had a hand in exposing the data. In the meantime, Cooper has agreed not to further use or publicly disseminate the personal data of Kaiser members on the Internet or elsewhere pending further court action.
According to Schiffgens, the data exposed included contact information such as names, addresses and telephone numbers, as well as medical record numbers that are unique identifiers within Kaiser Permanente. For a very small portion of the HMO's members, some routine lab information was also posted, he said.
Kaiser is now contacting the affected patients while it tries to determine on its own how the patient information became public. Cooper said she stumbled on it while doing a search for information about the company; Schiffgens denied that the data would have been publicly available.
"We're aware of the individual's allegations as to Kaiser Permanente posting this information to the Web," he said. "Our investigations have not been able to determine that, and we continue to investigate how this information came into her possession. What I can say is that Kaiser had a Web site that made various different schematics available so that remote IT people could do their work and see the schematics of the systems they were working on."

Cooper, who described herself in an e-mail message to Computerworld as a former "Web coordinator" for the HMO, claimed that the Web site she found contained diagrams of Kaiser systems, as well as the confidential patient data. In fact, she said she accessed the site using Google.
"I had been trying to dispute my termination, but Kaiser would not allow [me] access to any of the documentation I needed," said Cooper, who

Continued...
1 | 2 | NEXT  



Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
"Mainframe security pilot fish works for a company that has big iron in the U.S., Europe and Asia -- and..." Read more...
Read more Security posts or See all Blogs
Microsoft: 'Vista Capable' lawyers trying to hijack Windows Update
Update: McCain protests YouTube's removal of his campaign videos
Virtualization leads Gartner's top 10 strategic technologies for 2009
More top stories...
Remote Control: NASA works to repair Hubble's failed computer
Cisco demos public rooms for TelePresence
Oracle issues 36 patches, but is anyone applying them?
How bad? 'I thought I was going to throw up,' Jennifer Brunner recalls.
Think your project's off track and over budget? Learn a lesson or two from these infamous project flameouts.
In our hands-on testing, the new Xohm WiMax network from Sprint was fast and smooth -- but for now, you have to be in Baltimore to get it.
College student David Kernell allegedly broke into a middle school server eight years ago, according to a former teacher.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Business Continuity Zone
The File Data Management Zone
Security Management Zone
The SAS Zone
Business Intelligence and Analytics Zone
Windows Protection Zone
The Enterprise Search Zone
Software as a Service Zone
The Security Zone

Ads by TechWords

See your link here
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center
Register for this complimentary webcast today!
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Windows® Enterprise Data Protection with Symantec Backup Exec™
Get this white paper now!
(Source: Symantec) With data protection becoming more distributed and IT resources increasingly constrained, businesses need a centralized data protection strategy that can manage multiple backup and recovery jobs. Learn how to address these critical enterprise challenges with dynamic disk-based data protection.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Grant Thornton Achieves 99.7% Tracking of Remote Assets
Virtualization Technologies and Their Impact on Disaster Recovery
LIVEWIRE™: Full-Server Protecting and Recovery in Real-Time
View more whitepapers