KCH, Kwai Chung Hospital suffered a data breach incident after an occupational therapist at lost her personal USB flash drive in taxi.
The device was not encrypted or password protected and contained 59 KCH patients’ records and reports with patient names, age, diagnosis, admission date and brief treatment notes.and for some patients Hong Kong identity card numbers was also included.
KCH contacted all concerned patients and their families to inform them of the incident and to express apologies.
Source: https://www.databreaches.net/hk-kwai-chung-hospital-reports-loss-of-personal-usb-flash-drive/
TPRM report: https://scoringcyber.rankiteo.com/company/kwai-chung-hospital
"id": "kwa2350291222",
"linkid": "kwai-chung-hospital",
"type": "Data Leak",
"date": "02/2011",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '59 patients',
'industry': 'Healthcare',
'location': 'Kwai Chung, Hong Kong',
'name': 'Kwai Chung Hospital',
'type': 'Hospital'}],
'attack_vector': 'Loss of USB Flash Drive',
'data_breach': {'data_encryption': 'No',
'number_of_records_exposed': '59',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Medium to High',
'type_of_data_compromised': ['Patient names',
'Age',
'Diagnosis',
'Admission date',
'Brief treatment notes',
'Hong Kong identity card '
'numbers']},
'description': 'Kwai Chung Hospital (KCH) suffered a data breach incident '
'after an occupational therapist lost her personal USB flash '
'drive in a taxi. The device was not encrypted or password '
'protected and contained 59 KCH patients’ records and reports '
'with patient names, age, diagnosis, admission date, and brief '
'treatment notes. For some patients, Hong Kong identity card '
'numbers were also included.',
'impact': {'data_compromised': ['Patient names',
'Age',
'Diagnosis',
'Admission date',
'Brief treatment notes',
'Hong Kong identity card numbers']},
'response': {'communication_strategy': 'KCH contacted all concerned patients '
'and their families to inform them of '
'the incident and to express '
'apologies.'},
'title': 'Data Breach at Kwai Chung Hospital',
'type': 'Data Breach',
'vulnerability_exploited': 'Unencrypted and Unprotected Data Storage'}