SimplyWell notified Lincoln Electric System employees of personal health info breach
Data privacy incident may affect the privacy of certain Lincoln Electric System (“LES”) employees’ personal health information.
LES began a new wellness challenge that was added to the “Wellness Events” section of the SimplyWell-LES private portal.
The page included a hyperlink that erroneously led to a file that contained a list of LES members who were tobacco-free.
The file was immediately deleted from the portal and SimplyWell commenced an investigation to confirm the nature and scope of this incident.
The accessible information was limited to an employee’s name, gender, date of birth, SimplyWell identification number, and the employee’s status as a non-smoker.
SimplyWell determined that this potential breach was the result of human error at SimplyWell.
SimplyWell is reminding potentially affected individuals to remain vigilant for suspicious activity.
"id": "SIM0495722",
"linkid": "simplywellinc",
"type": "Data Leak",
"date": "05/2018",
"severity": "25",
"impact": "2",
"explanation": "Attack limited on finance or reputation"