UCI notifies students of malware incident

May 22nd, 2014 by admin Leave a reply »

University of California Irvine (UCI) notified 1,813 students and some non-students affected by a data breach involving key logging software malware. Three UCI student health care computers were affected by the malware incident. The incident came to notice when UCI IT security office learned about the malware on computers.

Information compromised includes patient name and unencrypted medical information. It also potentially included health or dental insurance number, CPT code(s), ICD9 code(s) and/or diagnosis) and student ID numbers. The affected group also included non student’s information like patient ID numbers, mailing addresses, telephone numbers, amount paid for services received, and bank name and check numbers. Information may have been transmitted to unauthorized servers.

According to reports, UCI immediately disconnected the affected computers and made sure that no other components of network were affected.

UC Irvine regrets that your information may have been subject to unauthorized access, and we have taken and continue to take remedial measures to ensure that this situation is not repeated. UC Irvine is committed to maintaining the privacy of students’ and non-student patients’ personally identified information and takes many precautions for the security of personal and medical information. The University is continually modifying its systems and practices to enhance the security of sensitive information.

The university has no indication that the data have been misused.  The  number of patients affected was not reported.

Get your personal as well as office laptops encrypted by Alertsec

Unencrypted laptops present a major risk of data loss. 80% of information theft is due to lost or stolen laptops and other equipment. About 50% of network intrusions are performed with credentials gathered from lost or stolen devices. The penalties for a data breach are severe not only in terms of the monetary fines imposed on the organization, but also the potential loss of trust from customers and suppliers. Encryption software greatly enhances the security of your organization’s data as the information is not compromised if a laptop is lost or stolen.

Alertsec Xpress is the full disk encryption service that delivers a mobile data protection system for all information stored on laptops used throughout your organization.

Enhanced by Zemanta

Leave a Reply