Sensitive patient data stolen from nursing building
'U' stresses timely reporting of theft
- Page 1 of 1
Since 8,585 tapes were stolen from the School of Nursing two weeks ago - the third data theft in the last year - University officials are stressing the importance of protecting against data theft.
The tapes were used as backups for the school's computer database. They contained patient information like social security numbers and patient names and addresses.
One of the most important steps to take in cases of theft is quickly reporting it to the University's Information Technology Security Services office, said Paul Howell, the University's chief information technology security officer.
He said the University's Information Technology Security Services office has numerous processes to prevent data theft, including technology products and training to help implement the best practices.
According to a policy outlining how the University deals with data theft, any faculty or staff member who notices a breach of technology security should immediately report it to an information security coordinator. All serious incidents involving unauthorized data access or data theft should then be reported to the ITSS.
When a theft like the one at the nursing school occurs, ITSS usually assembles a security response team. Those teams are made up of different officials depending on the incident, Howell said. That means they might include representatives from the Department of Public Safety or the University's media relations office.
Howell said even with an extensive security system in place, data theft can still occur.
He said the nursing school theft, which took place in the North Ingalls Building over the weekend of Sept. 7, was the first of its kind at the University. In the past, databases have been hacked. The most recent of these incidents was in July when two School of Education databases containing student information were accessed.
The tapes were "in a locked box, in a locked cabinet, in a locked room," University Hospital spokeswoman Kallie Michels said.
DPS spokeswoman said there were no signs of forced entry in the room.
Michels said a system administrator noticed the box was missing on a Monday morning, and called the Department of Public Safety after realizing that it could have been stolen. Nursing School Dean Kathleen Potempa notified ITSS.
The School of Nursing office sent out letters to the patients with stolen information, detailing how to report a possible identity theft.
Police have no suspects in the case, Brown said.
Viewing Comments 1 - 5 of 7
AOSS TOO
posted 9/19/07 @ 11:37 AM EST
It seems the only action taken since 9/11 is to give criminals more access. AOSS's data theft alert went to employees. And the students over the last decade didn't deserve the protection notice too at the time of theft? Why is that again? AOSS's Chair, Tamas Gombosi is culpable as is DPS's William Bess for failure to alert ASAP all students who had work and personal information on the AOSS stolen computers. (Continued…)
Be Secret Service -
posted 9/19/07 @ 11:43 AM EST
Me thinketh the stolen computers are not what they're after. All paper trails lead to William Bess. How can he afford those luxery items on a public employees salary? It is a way to create identify theft. (Continued…)
TEAMWORK THIEVES: WILL RHEE AND THE OFFICE OF GENERAL COUNSEL
posted 9/19/07 @ 8:49 PM EST
We can't call the aforementioned Ocean's 11, 12, or 13 because they also have Atmospheric and Space Science. But they are your theives!
Why was the November 2006 AOSS data theft job deleted from all web sites this afternoon. (Continued…)
Henry Hertz Hobbit
posted 9/22/07 @ 1:22 AM EST
It looks like an inside job to me, or at least somebody who knew where the removable media is at. Also, at a university I worked at, every time they blamed the custodians for the thefts and almost every time it was security doing the thefts. (Continued…)
Comfyllama
posted 9/19/07 @ 9:57 AM EST
I understand this breach to be one tape containing information on 8,585 individuals, not 8,585 tapes as your article states.