Three unencrypted backup tapes containing sensitive personal data have been reported missing by Nemours, a children’s health care services provider.
The tapes in question were reported missing from a facility in Wilmington, Delaware on September 8, 2011. The company believes they have been removed around August 10, 2011 during a renovation project.
The data stored on the tapes dates mainly between 1994 and 2004 and affects approximately 1.6 million patients and their guarantors, vendors, and employees at Nemours facilities in Delaware, Pennsylvania, New Jersey and Florida. The missing backup tapes contained information including name, address, date of birth, Social Security number, insurance information, medical treatment information, and direct deposit bank account information.
“There is no indication that the tapes were stolen or that any of the information on them has been accessed or misused,” the company said in a statement.
The company said it had hired independent security experts who determined that “highly specialized equipment and specific technical knowledge” would be needed in order to make use of the data.
No medical records were stored on the tapes.
In related news, just last week a similar incident occurred with lost backup tapes at TRICARE, a provider of health care services to active and retired military personnel, that could potentially affect 4.9 million individuals. These careless and easily preventable incidents will prove to be costly mistakes for both organizations.
For more than 10 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is the Director of several leading security industry conferences around the world.
More from Mike Lennon
- ‘No Evidence’ of Cyberattack Related to FAA Outage, White House Says
- SecurityWeek to Host 2022 ICS Cybersecurity Conference October 24-27 in Atlanta
- Google Completes $5.4 Billion Acquisition of Mandiant
- Cybersecurity Firm ZeroFox Begins Trading on Nasdaq via SPAC Deal
- HUMAN Security and PerimeterX Merge on Mission to Combat Bots
- Last Call: CFP for ICS Cybersecurity Conference Closes July 15th
- Johnson Controls Acquires Tempered Networks to Shield Buildings From Cyberattacks
- Snowflake Launches Cybersecurity Workload to Find Threats Across Massive Data Sets
Latest News
- Sentra Raises $30 Million for DSPM Technology
- Cyber Insights 2023: Cyberinsurance
- Cyber Insights 2023: Attack Surface Management
- Cyber Insights 2023: Artificial Intelligence
- Microsoft’s Verified Publisher Status Abused in Email Theft Campaign
- Guardz Emerges From Stealth Mode With $10 Million in Funding
- How the Atomized Network Changed Enterprise Protection
- Critical QNAP Vulnerability Leads to Code Injection
