For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Subscribe to
Computerworld 40 years of the most authoritative source of news and information for IT leaders.
Four lose jobs after data breach at Oregon health care facility
or
Other Security Stories
|
|
|
|
February 28, 2006 (Computerworld) -- One employee was fired and three others resigned in connection with the theft in late December of backup computer tapes and disks containing personal information and medical records on about 365,000 hospice and home health care patients from a parked car in Portland, Ore.
In an announcement late last week, Providence Home Services, a division of Seattle-based Providence Health System, said the four workers left the company after “a confidential and thorough internal review process of the data storage procedures that led to the theft.” A Providence spokesman confirmed that three of the workers resigned, while one was fired. The spokesman could not confirm the job titles of the workers, but said that all four had jobs related to the data-theft incident.
The theft took place Dec. 31, when a Providence Home Services IT department worker took backup tapes and disks home in his car as part of the home health care division’s backup protocol. The disks and tapes were stolen after they were left in the employee’s car overnight (see ”Update: Thief nabs backup data on 365,000 patients”). The division has since discontinued that backup procedure and brought in more traditional means of protecting data.
Some of the data on the tapes was password-protected at the application level, while the rest of the data was stored in proprietary file formats without password protection. After the incident, the company decided to make all of its data more secure by using additional technologies, including encryption.
Providence notified all affected patients by mail about the theft. The information on the disks and tapes included names, addresses, dates of birth, physicians’ names, insurance data, diagnoses, prescriptions and some lab results. For approximately 250,000 of the patients, Social Security numbers were on the records, according to the company. Some of the records also included patient financial information.
Providence said it has received no verified reports that the stolen data has been used illegally.
The health care group has also reached a deal with security vendor Kroll Inc. to provide Kroll’s ID TheftSmart credit monitoring and restoration services for free to those affected by the theft. ID TheftSmart allows individuals to continuously monitor their credit files, investigates potential identity theft cases and can help identity theft victims restore their identity if data theft occurs.
Starting next week, affected patients will get a letter from Kroll detailing how to sign up for the program.
“We think this will help address the concerns of our patients and their families and help put their minds at ease,” Rick Cagen, CEO of Providence Health System’s Portland Service Area, said in a statement. “We have heard from patients that the process to notify the credit agencies can be difficult, and we appreciate the time they have spent as a result of the theft.”
The data theft incident is under investigation by the Oregon attorney general’s office. A spokesman for the attorney general’s office could not be reached for comment.
Read more news and commentary about data breaches:
- FTC settles with CardSystems over data breach
- Update: N.H. state server eyed in possible credit card data breach
- Bank tape lost with data on 90,000 customers
- Update: Security breach at Sam's Club exposes credit card data
- New York breach notification law goes into effect
- DSW to beef up computer security in FTC settlement
- Lessons learned from corporate security breaches
- Are companies prepared for fallout from a security breach?
- IT Blogwatch -- The best IT blogs on the Net: ChoicePoint fined, but not much
- C.J. Kelly: Employee fired for a data breach?
- Douglas Schweitzer: Time to get physical!
- Security Blogs
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
 |
|
All Zones Application Performance Zone Enterprise-Class Security Zone Enterprise Solutions Zone The File Data Management Zone Grid Computing on Windows Zone Security Management Zone ITIL Best Practices Zone The SAS Zone Storage Virtualization Zone The Data Center Management Zone |
 See your link here
|
 |
||||||||
| ||||||||
| ||||||||
| ||||||||
|
Long Tail Supplier Collaboration - What's In It For You? 
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
Get this white paper now!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
- Update: Microsoft to appeal $1.3B EU fine
- XP SP3 cripples some PCs with endless reboots
- Windows Vista more secure than XP, says security company
- More top stories
Security Management ZoneSecurity management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure. Visit the CDW Security Management Zone now See All Zones
|
 Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day. New baits 
|
Computerworld Technology Briefing: An open-source path to optimal virtualization Looking for a virtualization strategy that offers both the flexibility and reliability to meet the demands of mixed-source environments? Look no further than the fast-emerging open virtualization approach backed by some of the biggest names in enterprise computing. Together they are pointing the way toward higher data center performance without higher costs.Download this briefing
|
 In SecurityThere's plenty of talk about how to behave during a Customs search of your computer and gear, but Jon Espenschied's got tips for securing your data (and privacy) before you reach the border. Click here to read the latest column by Jon Espenschied |
 |
 |
Layered Security Solutions
Although basic network security issues have changed very little over the past decade, the
network security landscape has changed dramatically. Today's IT professionals still have the
primary responsibility of protecting the confidentiality of corporate information, preventing
unauthorized access, and defending the network against attacks. Security experts and analysts agree that a security solution comprised of multiple layers is the best defense against today's increasingly sophisticated attacks.Download this white paper
|
Universal Threat Management - Because Conventional UTM is Not Enough!
This white paper, written by Mark Bouchard of Missing Link Security Services, examines the challenges confronting today's enterprises with respect to managing threats on a network. It also discusses the need for "Universal Threat Management", which is a security solution approach for all physical locations within an enterprise that require threat protection.Download this white paper |
Selecting the Right Threat Management Solution
This short demo will guide you through key considerations for selecting a solution to manage threats on a network. Learn about the popularity of Unified Threat Management (UTM), and how it fits into an overall security solution. Explore critical elements of a network-wide solution for multisite and large network-size deployments and identify the four key features of a threat management solution.View this demo
|
CIO
Computerworld
CSO
DEMO
GamePro
Games.net
IDG Connect
IDG World Expo
Infoworld
The Industry Standard
ITworld
JavaWorld
LinuxWorld
MacUser
Macworld
Network World
PC World
Playlist
Copyright © 2008 Computerworld Inc. All
rights reserved. Reproduction in whole or in part in any form or medium
without express written permission of Computerworld Inc. is prohibited.
Computerworld and Computerworld.com and the respective logos are
trademarks of International Data Group Inc.
|
