Thursday, June 19, 2008

Security Breaches Update

According to the Identity Theft Resource Center, the total number of Security Breaches in the United States as of 06/17/08 is 323 with a the number of exposed records at 16,820,247. Full report at the Identity Theft Resource Center

After reviewing the list, I noticed that the University of Utah Hospitals and Clinics was listed as 0 records exposed because the data was encrypted. The number of medical records stolen was 2.2 million. However, when I spoke with the University, I was told only 1.3 million had social security numbers in the records. They are offering ID Theft protection services so they must be worried about their encryption method. If you figure in this number, then the total records exposed would be over 19,000,000. If you have been a patient at these Hospitals or clinics in the last 16 years then visit http://healthcare.utah.edu/billingrecordstheft/index.html

As far as the data being encrypted, this is what is being reported:

After consulting with a recognized information technology security firm, University of Utah Hospitals & Clinics determined that it is possible to access the data, but only by using professional equipment.
Here is what happened:
Early in the morning on Monday, June 2, a metal box that contained backup tapes with patient billing records from University of Utah Hospitals & Clinics was stolen from a vehicle owned by an employee of an independent off-site storage company used by the hospital and clinics. The driver violated two of his company’s protocols: first, he used his own car instead of a secure company van to transport the tapes; second, he did not take the tapes to the company’s secure vault but drove home, where he left the box of tapes in the car outside overnight.

The backup tapes contained billing records for approximately 2.2 million individuals, patients and guarantors (persons financially responsible for paying), treated at University of Utah Hospitals & Clinics’ facilities or by one of our providers during the past 16 years. The billing records included patient names, related demographic information, and diagnostic codes. Approximately 900,000 patients did not have a Social Security number attached to their records. For approximately 1.3 million of these patients, the personal information did include Social Security numbers. Not all data fields on the billing records were filled in for each patient, but types of information possibly included on the tapes are date of birth, physician name, insurance, driver’s license number, and in rare instances clinical notes corroborating diagnosis for billing purposes. No credit card information was included on the tapes.

The University is offering Triple Advantage from Experian. However, with all the medical info on the tapes, I would not only be worried about financial identity theft but also MEDICAL IDENTITY THEFT. I didn't see anywhere at Triple Advantage where Medical Identity Theft would be covered.

At least I know the company I recommend, Kroll, Inc. will assist if medical identity theft occurs.

To learn more about Identity Theft and what to do if you are a victim, visit www.StopIdTheftCrime.com and subscribe to the newsletter to obtain your free 46 page eBook "Fighting Back Against Identity Theft".

Remember, estimates are that every 2-4 seconds an Identity is compromised. Why take chances? Why not protect yourself and your loved ones with the best suite of services provided (including restoration) by the best NYSE company in the field? Educate yourself and visit the shameless plug below or call me at (909) 208-3728!

Shameless plug
the Best Identity Theft Protection available dot com

Child Identity Theft Does Happen

Identity Theft Shield Overview