Internal Revenue Service

Missing documents lead to data breach

April 2nd, 2015

Life Care Center of Attleboro in Massachusetts suffered a data breach when the company that stores its patient records could not find certain documents. Iron Mountain which stores records for Life Care Center could not find certain documents which contained patients’ information. The breach came to notice during the audit. The affected patients involved those who received medical care in Life Care Center between 1992 and 2004. Employees who worked at Life Care between 1992 and 1999 may also suffer a data breach.

The compromised information includes patient names, addresses, Social Security numbers, dates of birth, diagnoses, and other medical status and assessment information. The missing box of documents may also contain financial information. It is not clear how the incident occurred.

“We are taking this matter very seriously and have conducted a thorough investigation,” the statement read. “Please be assured that we have taken every step necessary to mitigate the circumstances resulting from this incident and to ensure an incident like this does not happen again.

According to Iron Mountain, records were inadvertently destroyed during a planned consolidation of storage facilities by a predecessor company.

“We are taking this matter very seriously and have conducted a thorough investigation,” the statement read. “Please be assured that we have taken every step necessary to mitigate the circumstances resulting from this incident and to ensure an incident like this does not happen again.”

Iron Mountain mentioned that it will continue the search.

“Until Iron Mountain completes a full audit of its records, they will not be able to ascertain whether the stored boxes are located, missing, misplaced, or destroyed,” according to Life Care. “This audit is expected to be completed by December 2015.”

Alertsec strengthens security

Alertsec has created a web based encryption service that radically simplifies deployment and management of PC encryption by using industry leading Check Point Full Disk Encryption (former Pointsec) software.

Organizations, especially corporate giants, have to have an information security policy in place that proves they have taken necessary steps and measures to safeguard the information they gathered. If these policies are not adhered to, the regulators may prosecute.

Alertsec Xpress is used by organizations that have recognized the need to protect their information. Customers range from single-user sole traders and consultants to multinational companies with a large number of offices around the globe. Over 4 million users worldwide use Alertsec Xpress’s Check Point Full Disk Encryption.

HIPAA violation by County employee

January 15th, 2015

The recent incident involved sending of personal information of inmates at a county jail to a personal email address. The Saint Louis County Department of Health is investigating a potential HIPAA violation. The affected data includes names and Social Security numbers of several inmates. The information is related to the inmates who are imprisoned at St. Louis County’s Buzz Westfall Justice Center from 2008 to 2014.

The number of affected individuals is not known. As per the county department, there is no indication that anyone other than the employee accessed the information.

“St. Louis County is strongly committed to patient privacy,” the statement said. “It is something we take very seriously. Even though there is no indication that there was any intent to use the information to commit fraud, it is important to make sure that those potentially affected are fully aware of the violation that occurred and fully aware of the steps they are advised to take at this point.”

Information related to free credit monitoring is not confirmed but the County Health Department explained that if an individual believed that their information was potentially included in the email, he or she should check with any of the three major credit bureaus.

The employee who sent the information currently does not work with County who earlier resigned after completing 25 years of services.

Alertsec strengthens security

Alertsec has created a web based encryption service that radically simplifies deployment and management of PC encryption by using industry leading Check Point Full Disk Encryption (former Pointsec) software.

Organizations, especially corporate giants, have to have an information security policy in place that proves they have taken necessary steps and measures to safeguard the information they gathered. If these policies are not adhered to, the regulators may prosecute.

Alertsec Xpress is used by organizations that have recognized the need to protect their information. Customers range from single-user sole traders and consultants to multinational companies with a large number of offices around the globe. Over 4 million users worldwide use Alertsec Xpress’s Check Point Full Disk Encryption.

Community Center ID Theft

November 12th, 2014

 

A nonprofit system of health clinics in Florida suffered data breach due to identity theft criminal operation. The affected clinic Jessie Trice Community Health Center said that patient’s information was targeted. According to the reports, personal information that was stolen includes Patients’ names, dates of birth and Social Security numbers.

 

“The leadership of Jessie Trice Community Health Center, Inc. deeply regrets this incident and is working vigorously and diligently assessing how to mitigate future risks to all patients and has implemented new procedures and protocols to protect patient information so that this type of theft cannot reoccur,” Jessie Trice president and CEO Annie Neasman explained in the statement.

 

The incident is under investigation by FBI and IRS. Total count of affected patients stands at 7,888 and are notified about the breach. The organization has retained a leading data breach response vendor to work with patients through the process.

 

For additional information about the JTCHC data breach, statement asks to contact their corporate office. According to the statement, no medical records were obtained or have been compromised. The mode and how the theft occurred are not clear. But the statement mentions that immediate action steps are underway to ensure clients protection.

 

Alertsec strengthens security

 

Alertsec has created a web based encryption service that radically simplifies deployment and management of PC encryption by using industry leading Check Point Full Disk Encryption (former Pointsec) software.

 

Organizations, especially corporate giants, have to have an information security policy in place that proves they have taken necessary steps and measures to safeguard the information they gathered. If these policies are not adhered to, the regulators may prosecute.

 

Alertsec Xpress is used by organizations that have recognized the need to protect their information. Customers range from single-user sole traders and consultants to multinational companies with a large number of offices around the globe. Over 4 million users worldwide use Alertsec Xpress’s Check Point Full Disk Encryption.

 

Two Men Jailed for Identity Theft

February 22nd, 2014

Angelo Ponds, 32, of Miami Gardens, Fla., and Sean Guillaume, 31, of Miramar, Fla. were sentenced to jail for their involvement in identity theft at medical Lab. Incident was related to stolen identity tax refund (SIRF) scheme. Ponds was sentenced to 48 months in prison and Guillaume was sentenced to 94 months in prison both to be followed by three years of supervised release.

Guillaume stole medical records with names, dates of birth, and Social Security numbers, and sold data for 5,000 individuals. He worked for unidentified medical laboratory testing company .He sold this information to Ponds. He knew that Ponds would use the PII to file fraudulent tax returns seeking refunds.

According to court documents, Guillaume worked for a company that performed medical laboratory tests where he had access to medical records with names, dates of birth, and Social Security numbers (personal identity information or “PII”) of individuals in the course of his employment with that company.

According to justice records, Ponds filed other people record fake taxation earnings with Internal Revenue Service seeking refunds.

Unencrypted laptops present a major risk of data loss. 80% of information theft is due to lost or stolen laptops and other equipment. About 50% of network intrusions are performed with credentials gathered from lost or stolen devices. The penalties for a data breach are severe not only in terms of the monetary fines imposed on the organization, but also the potential loss of trust from customers and suppliers. Encryption software greatly enhances the security of your organization’s data as the information is not compromised if a laptop is lost or stolen.

Get your personal as well as office laptops encrypted by Alertsec

Unencrypted laptops present a major risk of data loss. 80% of information theft is due to lost or stolen laptops and other equipment. About 50% of network intrusions are performed with credentials gathered from lost or stolen devices. The penalties for a data breach are severe not only in terms of the monetary fines imposed on the organization, but also the potential loss of trust from customers and suppliers. Encryption software greatly enhances the security of your organization’s data as the information is not compromised if a laptop is lost or stolen.

Alertsec Xpress is the full disk encryption service that delivers a mobile data protection system for all information stored on laptops used throughout your organization.

Enhanced by Zemanta

Increasing tax related Identity Theft

October 10th, 2013

A report from the U.S. Treasury Inspector General for Tax Administration (TIGTA) states that during 2011, 1.5 million fraudulent tax returns were processed, and refunds totaling $5.2 billion were issued to the wrong people.

In calendar year 2012, the Internal Revenue Service identified almost 1.8 million incidents of tax-related identity theft. This figure includes approximately 280,000 incidents in which taxpayers contacted the IRS alleging that they were victims of identity theft. As of midyear 2013, over 565,000 cases have been reported to the IRS.

In an address to tax professionals in Grapevine, Texas, on July 30, 2013, then-IRS Principal Deputy Commissioner and now IRS Acting Commissioner Daniel Werfel stated that there are more than 3,000 IRS employees working on identity theft. That’s more than double the number at the start of the 2013 tax filing season. On average, it takes the IRS approximately six months to resolve a tax identity theft issue. However, as the IRS is one of the federal government agencies that have been shut down as a result of the most recent budgetary gridlock within the Administration and Congress, the resolution of tax identity theft issues may take even longer once the IRS is reopened.

IRS is beginning to implement screening filters that help to prevent false returns from being processed. In addition, the IRS has started to issue identity theft PINs to those taxpayers who have been identified as victims of tax-related fraud.

Taxpayers who complete and file IRS Form 14039 (Identity Theft Affidavit) receive an Identity Theft Protection PIN (IP PIN) once their identity has been verified. Returns filed with the IP PIN will be processed as a legitimate return in the usual manner, meaning that even though a taxpayer previously had a tax-related identity theft problem, the use of the unique IP PIN issued by the IRS will allow future returns to be processed in a normal time frame.

Alertsec strengthens security

Alertsec has created a web based encryption service that radically simplifies deployment and management of PC encryption by using industry leading Check Point Full Disk Encryption (former Pointsec) software.

Organizations, especially corporate giants, have to have an information security policy in place that proves they have taken necessary steps and measures to safeguard the information they gathered. If these policies are not adhered to, the regulators may prosecute.

Alertsec Xpress is used by organizations that have recognized the need to protect their information. Customers range from single-user sole traders and consultants to multinational companies with a large number of offices around the globe. Over 4 million users worldwide use Alertsec Xpress’s Check Point Full Disk Encryption.

Enhanced by Zemanta

Security breach of student data at Community College

March 15th, 2013

The Tallahassee Community College officials announced on Friday, about an unauthorized acquisition of computerized data on their systems. The recently occurred data breach at the community college may put previous data security, confidentiality, or integrity of personal information in jeopardy. In a recent notification disclosed by the federal officials, the administration of the Tallahassee College was told of the occurred data breach. The investigation carried out by the federal officials, resulted in the conviction of a Miami, Florida man on submitting false claims to the Internal Revenue Service and on the charge of access device fraud as well as of the aggravated personal identity theft. This attempt can be overlooked in the presence of a data security.

“TCC values the protection of private information, so we take this matter very seriously,” said a TCC Chief of Police David Hendry. He continued, “We have identified the group of individuals whose information may have been compromised, and we will immediately begin the process of contacting each one.”

According to Hendry, it is believed by the college officials that the occurred data breach has occurred internally and affects more than approximately 3,000 individuals. The investigation into the occurred data breach will be ongoing. Also, personalized letters by TCC will be mailed to the persons who are potentially affected by the occurred data breach. The letters will contain the details regarding what steps can be taken by the individuals to make sure the security of their identities; TCC will also provide additional resources, including a TCC hotline to provide further information.

How an encryption software like Alertsec’s would have helped!

The use of encryption software would have helped to keep files protected on the computer. With encryption installed, none of the information or credentials would have been lost. Alertsec uses industry leading Check Point Full Disk Encryption (former Pointsec) software to create a web based encryption service that simplifies deployment and management of PC encryption. The best way to protect information stored on a PC is by using encryption. Alertsec Xpress offers full disk encryption and is therefore superior to other encryption methods when comparing security, performance, robustness and ease-of-use for both administrators and users.

Alertsec is part of the Durator Group which has been awarded the highest credit rating available.

Enhanced by Zemanta