University of Louisville Patient Information Exposed to Internet For Over A Year
Submitted by Adam Dodge on Tue, 2010-06-01 11:43
Quick Facts
- Date: 6/1/2010
- Institution: University of Louisville
- Type of Incident: Unauthorized Disclosure
- Number Affected: 708
- Source: ESI
- Abstract Source: Business First of Louisville, WFPL
Abstract
The University of Louisville recently announced the accidental exposure of patient information to the Internet. The web site, belonging to the university's Kidney Disease program, contained the names, Social Security number and medical information on 708 patients. The information was available through the web site from October 1, 2008 to May 17, 2010. According to officials a programming error caused the information to become exposed to the Internet without any need for a password or login. The site has been removed and the University is offering one year of credit monitoring for the individuals affected. Individuals with questions can contact the U of L Kidney Disease Program at 502-852-0785.