The District Medical Group (DMG) found out that an unknown number of patients’ PHI was potentially made accessible on the Internet. After the breach got noticed, DMG immediately began an investigation. As per the reports, employee working at home used a thumb drive that contained patient billing information which got exposed on internet due to security vulnerability on the home network.
The thumb drive included patients’ names, dates of service, names of department where the patients were treated, refund amounts, and in some instances, Social Security numbers. Credit card and banking information were not affected in this breach.
According to the statement:
After we found out about this incident, we promptly took steps to remove the information from the Internet, including working to ensure the documents are no longer available through a search engine.
We deeply regret any inconvenience it may cause our patients. To help prevent something like this from happening in the future, we have taken a number of actions, including providing education to the involved employee and re-educating all employees regarding the protection of sensitive information. In addition DMG is reviewing and updating pertinent policies and procedures regarding data privacy and security.
Alertsec strengthens security
Alertsec has created a web based encryption service that radically simplifies deployment and management of PC encryption by using industry leading Check Point Full Disk Encryption (former Pointsec) software.
Organizations, especially corporate giants, have to have an information security policy in place that proves they have taken necessary steps and measures to safeguard the information they gathered. If these policies are not adhered to, the regulators may prosecute.
Alertsec Xpress is used by organizations that have recognized the need to protect their information. Customers range from single-user sole traders and consultants to multinational companies with a large number of offices around the globe. Over 4 million users worldwide use Alertsec Xpress’s Check Point Full Disk Encryption.