> JapanHacked_
[Resolved][Severity: Moderate][Lost device]

Hiroshima City Rehabilitation Hospital: a private USB stick with prescriptions of 101 inpatients was lost

A staff member put patient data on a private USB stick, which was not allowed, took it out of the hospital and lost it.

Disclosed

2020-05-01

Organizations involved

1

Leaked or at risk

101

101

Downtime

Unknown

Impact

The stick held names, birth dates, genders, the names of doctors and pharmacists in charge, and prescriptions of 101 inpatients. No misuse had been reported. [1] [2]

Background

The hospital allowed only USB sticks it issued and banned taking medical data out without permission, but the rules were not followed. Patients and families were told and offered an apology. [2]

Timeline

  1. Disclosed 2020-05-01
  2. 1 days

Attack or cause

Method
[Lost device]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Date of birth][Gender][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][News]１０１名分の患者情報を私物USBメモリに無許可保存、持ち出し紛失（広島市立リハビリテーション病院）ScanNetSecurity · 2020-05-08 09:00
  2. [2][News]患者情報含む私物USBメモリが所在不明 - 広島市Security NEXT · 2020-05-07