> JapanHacked_
[Resolved][Severity: Moderate][Lost device]

Showa University Hospital: a USB drive with a billing list of 149,335 patients was lost in an office

A USB drive used for billing in the administration office went missing. It holds names, patient and insurer numbers; the hospital does not expect it left the building.

Disclosed

2020-11-30

Organizations involved

1

Leaked or at risk

149.3K

149,335

Downtime

Unknown

What happened

A USB drive used for billing management in the administration office went missing. It holds a billing list for care from January 2017 to July 2020, with the patient numbers, names, treatment dates, insurer numbers, public expense numbers, treatment days and billing points of 149,335 patients. It does not hold contact details such as addresses or phone numbers. [1] [2]

The hospital said that because it was lost inside the office, it did not think the data left the hospital. It reminded all staff to handle personal data carefully and promised stricter management. [1] [2]

Timeline

  1. Disclosed 2020-11-30
  2. 1 days

Attack or cause

Method
[Lost device]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][Official]患者様情報を含むUSBメモリ紛失に関するお詫びとご報告Showa University Hospital · 2020-11-30
  2. [2][News]患者情報約15万件含むUSBメモリを紛失 - 昭和大学病院Security NEXT · 2020-12-01