Quick Facts

• Date: 2/3/2011
• Institution: University of Washington
• Type of Incident: Unauthorized Disclosure
• Number Affected: 17 (via PHIPrivacy.net)
• Source: PHIPrivacy.net
• Abstract Source: KING5

Abstract
KING5 was recently contacted by an individual that obtained University of Washington medical records while purchasing surplus furniture. The information is stored on 19 DVDs and one paper record and is comprised of mostly X-ray and MRI images of spines. KING5 Allen Schauffler was able to trace Vicki Goetz, whose name, along with phone number, was on a post-it note attached to a DVD. According to Goetz, she was a patient of the UW Bone and Joint Center and had two different surgeries there before finding another doctor. UW has stated that they are not sure how these files could have been left in surplus furniture but offers apologies to everyone affected. A UW spokesperson also said the university is reviewing policies and procedures and will work to tighten things up.

Quick Facts

• Date: 1/24/2011
• Institution: Wentworth Institute of Technology
• Type of Incident: Unauthorized Disclosure
• Number Affected: 1,300
• Source: PHIPrivacy.net
• Abstract Source: WCVB

Abstract
Wentworth Institute of Technology is notifying current and former students after personal information was discovered online. According to the letter, the information found online included the names, Social Security numbers, dates of birth, allergies, medications, medical conditions and disability information on 1,300 current and former students. According to WIT spokesperson Jamie Kelly, the information was placed online by mistake and could only be found through a "targeted search" of the WIT website.

Special Thanks to Dissent from PHIPrivacy.net, DataBreaches.net and PogoWasRight for letting ESI know about this incident - Adam

Quick Facts

• Date: 10/18/2010
• Institution: University of Arkansas for Medical Sciences
• Type of Incident: Theft
• Number Affected: Unknown
• Source: PHIPrivacy.net
• Abstract Source: Arkansas Business

Abstract
The recent theft of a digital camera from the University of Arkansas for Medical Sciences may have exposed the personal information of newborns. The camera, stolen from a nurse's lab coat, contained photographs of newborns that included labels with the baby's name, mother's name, birthday, address, telephone number, insurance status, doctor's name and medical record number for an unknown number of newborns. Images on the stolen camera were taken between July 2010 and October 2010. The camera was discovered missing on October 12.

Quick Facts

• Date: 10/16/2010
• Institution: University of California Davis Medical Center
• Type of Incident: Theft
• Number Affected: 900
• Source: PHIPrivacy.net
• Abstract Source: The Sacramento Bee

Abstract
University of California Davis Health Center is notifying patients after a theft at a courier facility. The thief made off with UC Davis Health Center documents such as copies of checks and remittance records from the UltraEx facility. These documents contained the financial information on 900 patients and the full Social Security numbers of 6 patients. To help prevent similar incidents in the future, UC Davis is prohibiting the courier service from storing documents overnight.

Quick Facts

• Date: 8/18/2010
• Institution: Yale University
• Type of Incident: Theft
• Number Affected: 1,000
• Source: PHIPrivacy.net
• Abstract Source: New Haven Register

Abstract
Yale University School of Medicine began notifying individuals following the theft of a laptop. The laptop, stolen from the office of a data analyst, contained clinical health information on 1,000 individuals. The laptop was password protected but not encrypted. The university is working with the Yale and New Haven police departments to investigate the theft. Individuals that are affected by the theft may contact the School of Medicine at 877-751-3361 for more information.