UNM HSC (Health Sciences Center) informed approximately 1,900 patients that hackers compromised their private data.
Reportedly, the hackers were able to reach a list that had certain personal information. As per a press release from HSC, two PCs located in an off-site UNM dispensary were attacked with a sophisticated malicious program. However, there was no infiltration into the IT security system of HSC, neither was data related to medical details breached, HSC said in a statement. On February 24, 2010, the Center issued a letter informing all patients who were impacted with the latest attack. The hacked folder carried names along with other private details about the patients who received medical treatment at the Center during 2007-09. There were no credit card details or Social Security Numbers inside the folder, the HSC press release revealed. But for precaution, patient information has been taken out from the computers, and the systems have been barred from use. Currently, the information is fully protected, the release states. Said director of public affairs Sam Giammo at HSC, attacks of the kind were on an increase. DailyLobo.com published this on March 4, 2010. Giammo added that anyone listening to the latest national news would be aware that it wasn't the Center alone which was affected with such attacks. The HSC press release also stated that the Center thought it as right to notify the incident to patients the names of whom the facility recorded in the folder. Meanwhile, an Information Technology security association advised HSC, which is part of the association, about the malware assault, on February 8, 2010. This was despite the knowledge if the attack actually intended to strike HSC. The UNM has over 10 off-site dispensaries. Officials representing the HSC stated that the computer intrusion had been analyzed in detail, although it remained undetermined whether the purpose of the hack was to get the folder's data. The Center's authorities stated that they would keep on doing what was necessary to secure its PCs from such attacks. In conclusion, HSC gave the assurance that it worked daily towards keeping health information of patients, secret and confidential. |