Alberta Health Services (AHS) says a computer hard drive that contained the personal health information of about 650 patients has been missing since August.
The exposed information includes patient names, gender, dates of birth, physician names and medical record numbers.
The agency says the external drive vanished from a cardiac outpatient clinical lab at the Mazankowski Alberta Heart Institute in Edmonton.
It was found that the external drive was not encrypted, as mandatory, and did not have password protection.
Source: https://calgary.citynews.ca/2019/10/08/records-of-650-patients-on-missing-computer-hard-drive-ahs/
TPRM report: https://scoringcyber.rankiteo.com/company/alberta-health-services
"id": "alb31917423",
"linkid": "alberta-health-services",
"type": "Data Leak",
"date": "10/2019",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': 650,
'industry': 'Healthcare',
'location': 'Edmonton, Alberta',
'name': 'Alberta Health Services',
'type': 'Healthcare Provider'}],
'attack_vector': 'Physical Theft',
'data_breach': {'data_encryption': 'No',
'number_of_records_exposed': 650,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Patient names',
'Gender',
'Dates of birth',
'Physician names',
'Medical record numbers']},
'date_detected': '2023-08',
'description': 'A computer hard drive containing the personal health '
'information of about 650 patients has been missing since '
'August. The exposed information includes patient names, '
'gender, dates of birth, physician names, and medical record '
'numbers. The external drive vanished from a cardiac '
'outpatient clinical lab at the Mazankowski Alberta Heart '
'Institute in Edmonton. It was found that the external drive '
'was not encrypted, as mandatory, and did not have password '
'protection.',
'impact': {'data_compromised': True},
'title': 'Data Breach at Alberta Health Services',
'type': 'Data Breach',
'vulnerability_exploited': 'Lack of encryption and password protection'}