> JapanHacked_
[Resolved][Severity: Moderate][Lost device]

Showa University Hospital: laptop and external drive with 1,300 patients' data lost outside the hospital

Showa University Hospital lost a laptop and an external drive holding data of up to 1,300 surgical patients outside the hospital.

Disclosed

2020-01-10

Organizations involved

1

Leaked or at risk

1.3K

1,300

Downtime

Unknown

What happened

Between late on and the next morning, a laptop and an external drive of the gastroenterological and general surgery department were lost outside the hospital. The hospital reported it to the police, kept searching and disclosed it on . [1] [2]

Impact

The devices held names, gender, age, patient card numbers, diagnoses and operations of up to {n:1300} patients. [2]

Cause

The hospital in principle banned taking personal data outside, but the data was not anonymized when it was taken out. [1] [2]

Timeline

  1. Disclosed 2020-01-10
  2. 1 days

Attack or cause

Method
[Lost device]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Gender][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][News]患者情報を記録したノートPCと外付けハードディスクを病院外で紛失、持ち出し時に匿名化を実施せず(昭和大学病院)ScanNetSecurity · 2020-01-14 08:00
  2. [2][News]患者情報含むPCとHDDを院外で紛失 - 昭和大病院Security NEXT · 2020-01-14