University of California
Courier Facility Theft Affects UC Davis Medical Center Patients
Submitted by Adam Dodge on Sat, 2010-10-16 04:21Quick Facts
- Date: 10/16/2010
- Institution: University of California Davis Medical Center
- Type of Incident: Theft
- Number Affected: 900
- Source: PHIPrivacy.net
- Abstract Source: The Sacramento Bee
Abstract
University of California Davis Health Center is notifying patients after a theft at a courier facility. The thief made off with UC Davis Health Center documents such as copies of checks and remittance records from the UltraEx facility. These documents contained the financial information on 900 patients and the full Social Security numbers of 6 patients. To help prevent similar incidents in the future, UC Davis is prohibiting the courier service from storing documents overnight.
UCSF Employee Charged With Using Fellow Employee Information in Wire Fraud
Submitted by Adam Dodge on Wed, 2010-05-12 23:00Quick Facts
- Date: 5/13/2010
- Institution: University of California, San Francisco
- Type of Incident: Employee Fraud
- Number Affected: Unknown
- Source: PHIPrivacy.net
- Abstract Source: San Francisco Chronicle
Abstract
A University of California, San Francisco Medical Center employee was recently charged in federal court for wire fraud. Cam Giang is charged with using the personal information of other UC employees, including names, last six digits of Social Security numbers and dates of birth, to create online accounts and complete surveys by StayWell Health Management Inc. Giang was rewared with hundreds of $100 Amazon gift codes. There is no information on how Giang was able to obtain the information on the other UC employees.
UCSF Laptop With Patient Records Stolen, Recovered
Submitted by Adam Dodge on Wed, 2010-01-27 16:58Quick Facts
- Date: 1/27/2010
- Institution: University of California, San Francisco
- Type of Incident: Theft
- Number Affected: 4,400
- Source: ESI
- Abstract Source: San Francisco Business Times
Abstract
The University of California, San Francisco recently announced the recovery of a stolen laptop containing patient information. The laptop, stolen from the UCSF School of Medicine employee around November 30th, contained the name, medical record number, age and clinical information on 4,400 patients. The UCSF police department began investigating the theft on December 1st and the laptop was recovered on January 8th. A review of the laptop determined the files contained "limited data" on UCSF Medial Center patients as well as some information on Beth Israel Deaconess Medical Center. UCSF has setup a hot line - 877-809-1270 x74005 - to help answer questions about the incident.
UCSF Doctor Falls Victim to Phishing Scam
Submitted by Adam Dodge on Tue, 2009-12-15 14:00Quick Facts
- Date: 12/15/2009
- Institution: University of California, San Francisco
- Type of Incident: Penetration
- Number Affected: 600
- Source: PHIPrivacy.net
- Abstract Source: San Francisco Business Times
Abstract
The University of California, San Francisco has alerted patients after a physician's email account was compromised. The email account contained demographic and clinical information as well as some Social Security numbers on 600 patients. The email account became compromised in mid-October after the physician fell victim to a phishing scam. Accordign to UCSF news director Corinna Kaarlela, these 600 individuals were notified staring October 21 and December 11, 2009 which is the period during with the university conducted an in-depth investigation into the incident. While the investigation uncovered no indication the emails were accessed, individuals potentially affected were urged to carefully review statement from health insurers for suspicious payments and immediately report any discrepancies to their insurance provider.
Berkeley School of Journalism Web Site Breach Exposes Student Information
Submitted by Adam Dodge on Tue, 2009-08-11 18:45Quick Facts
- Date: 8/11/2009
- Institution: University of California, Berkeley
- Type of Incident: Penetration
- Number Affected: 493
- Source: OSF DataLoss DB
- Abstract Source: UC Berkeley News
Abstract
The University of California, Berkeley is notifying students after a web server containing student information was breached. The web server, part of the university's School of Journalism, contained the personal information, dates of birth and Social Security numbers of 493 students that applied for admission between September 2007 and May 2009. While there is no evidence that the attacker gained access to the student data, the university issued the warnings to be safe. Staff became aware of the incident after launching an investigation into the claims that someone had breached the site. Staff worked quickly to repair the security vulnerability and the web site was placed back online.



