US Berkeley HeartLab Oct 2008 Misuse (Q16169)

From Open Risk Manual
Revision as of 23:15, 8 March 2020 by imported>Wiki admin (‎Created a new Item)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
A data breach risk event
Language Label Description Also known as
English
US Berkeley HeartLab Oct 2008 Misuse
A data breach risk event

    Statements

    0 references
    October 2008
    0 references
    Berkeley HeartLab (a Celera business) notified the New Hampshire Attorney Generals Office that in late September of this year, it learned that a former employee had accessed patient data in 2008 and/or 2009. The employee subsequently went to work for an unnamed competitor, and BHL believes that the employee took the data for competitive purposes and not for purposes of identity theft. The data accessed included names, addresses, dates of birth, lab tests run and results, and Social Security numbers. The total number of patients whose data were acquired was not reported but 8 residents of New Hampshire were affected. I did some digging into this breach and discovered that BHL had filed a lawsuit in January 2010 against Health Diagnostic Laboratory, Inc., and several former employees for tr (English)