BREAKING: UCLA Health breach put data at risk for 4.5M

[villager]

Source: Modern Healthcare

Four-hospital UCLA Health said Friday that cyber criminals hit part of their network that contains the records of an estimated 4.5 million people.

“At this time, there is no evidence that the attacker actually accessed or acquired individuals' personal or medical information,” UCLA Health said in a statement.

The UCLA Health statement said the four-hospital system first discovered suspicious activity on its network last October, but not until May 5 did it learn that the attackers had accessed parts of the network that contained “personal information such as names, addresses, dates of birth, Social Security numbers, medical record numbers, Medicare or health plan ID numbers and some medical information.”

“Based on the continuing investigation, it appears that the attackers may have had access to these parts of the network as early as September 2014,” the statement said.

<snip>

Read more: http://www.modernhealthcare.com/article/20150717/NEWS/150719915?utm_campaign=socialflow&utm_source=twitter&utm_medium=social

[IcyPeas]

1. UCLA? again?

I donate blood when they do their blood drives. Years ago they had laptops stolen with all the donor's information on it.

http://newsroom.ucla.edu/releases/Two-Laptop-Computers-Stolen-from-5275

UCLA began mailingletters June 5 about the theft of a laptop computer from a locked van at a UCLAblood drive last November. The computerheld a database containing personal information from some 145,000 people whohave donated blood and platelets to the UCLA Blood and Platelet Center since1985.

The password-protected information includeddonors' names, birth dates and Social Security numbers, but no medical dataother than blood type.

A second laptop wasstolen two weeks ago from a UCLA Healthcare financial office that could put anadditional 62,000 patients at risk. Thehospital will notify these people by letter in the next few weeks.

Both thefts werereported to the University of California Police Department.

"When the firstlaptop was stolen in November 2003, the hospital reported the crime to thepolice as a property theft," explained Frances Ridlehoover, chief operatingofficer for UCLA Medical Center. "Whenwe were reviewing and updating our patient-privacy policies in the spring, we realizedthat persons named on the stolen blood-donor database could be at risk foridentity theft. We immediately began toinform all donors who were potentially at risk.

[villager]

2. In the old days, you stole the artifact that held the info. Now you hack into the "cloud."

I guess UCLA has updated the "leaky sieve" aspects of its operation!