Quick Facts

• Date: 9/3/2010
• Institution: University of Rochester
• Type of Incident: Loss
• Number Affected: 837
• Source: ESI
• Abstract Source: WHEC

Abstract
The Univeristy of Rochester Medical Center is working to notify patients after a doctor lost a flash drive containing patient information. The flash drive, which belonged to Dr. Jeffery Peters, contained the names, birth dates and diagnosis of some patients. Dr. Peters cannot recall which of his 837 patients were on the flash drive so letters have been sent to all of them. According to Teri D'Agostino, Dr. Peters and others attempted to locate the flash drive for 3 weeks before notifying medical center officials. "He's deeply concerned by that. These are his own patients, this is his practice, this is his image, and he cares about that. So we applaud him for coming forward," said D'Agostino. Jeffery Powell, the URMC CIO, said they medical center will being looking into encryption for all computers and flash drives.

Quick Facts

• Date: 1/11/2009
• Institution: University of Rochester
• Type of Incident: Penetration
• Number Affected: 450
• Source: OSF Data Loss Database
• Abstract Source: University of Rochester News Release

Abstract
The University of Rochester announced that it has discovered the unauthorized copying of approximately 450 Social Security numbers from a non-academic database. The university is alerting current and former students affected by the incident through email and postal mail. Officials notified the authorities after discovering the breach including the FBI, the NY Attorney General and the NYS Office of Cyber Security. All affected individuals are being offered one year of credit monitoring at no cost.

Update 1/20/09 Corrected typo in title and fixed the abstract link. Special thanks to Allison Dolan for making us aware of these problems - Adam