[Resolved][Severity: Critical][Lost device]

Eiheiji Town: a University of Fukui staff member lost a USB drive holding data of 1,388 patients at the town's home-visit clinic

A USB drive taken out on April 22 went missing. It held names and diagnoses of 1,388 patients from August 2019 to March 2021.

Disclosed

2021-05-10

Organizations involved

Leaked or at risk

1.4K

1,388

Downtime

Unknown

What happened

2021-04-22
At the Eiheiji town home-visit clinic, where the University of Fukui is the designated manager, a university staff member took out a USB drive holding clinic documents for work. It later went missing. [1]

Impact

The USB drive held names, addresses, birth dates, ages, diagnoses, referral sources, whether home visits took place and emergency contacts of 1,388 patients from August 2019 to March 2021. The clinic and the university explained what happened to the patients concerned by letter and apologized. [1]

Timeline

Started 2021-04-22
Detected, Disclosed 2021-05-10
18 days

Attack or cause

Method: [Lost device]
Impact: [Data leak]
Entry point: Unknown

Data exposed or at risk

[Name][Postal address][Date of birth][Health data][Phone number]

Organizations involved

[Breached][Critical]Fukui, EiheijiMunicipality1,388 leaked
Eiheiji Town
[Breached][Major]Fukui, FukuiEducation and learning support
University of Fukui

						Note
Eiheiji Town	[Breached]	[Critical]	Fukui, Eiheiji	Municipality	1,388
University of Fukui	[Breached]	[Major]	Fukui, Fukui	Education and learning support	Unknown

Open in organization search

Sources

[1][News]在宅訪問診療所で患者情報含むUSBメモリを紛失 - 永平寺町Security NEXT · 2021-05-10