« Google, Inc. (NASDAQ: GOOG) Launches E-mail Security Services For Business | Main | Harvard Hacker Breach Exposes Information On 10,000 Graduates Students And Applicants »

18 February 2008

Tenet Healthcare Corp (NYSE: THC) Identity Theft By Ex-Employee May Affect 40,000 Patients

Tenet Healthcare Corporation (NYSE: THC) has mailed letters to 40,000 patients at 54 hospitals nationwide that their personal information including social security numbers may have been stolen by an ex-employee, Terrance Brooks, at Tenet's billing center in Frisco, Texas. 

Terrance Brooks, convicted of this identity theft crime had access to Tenet's billing systems which stored patient's personal data including birth data and social security numbers.  According to some news reports, the Brooks was arrested on November 25 after attempting to open a credit card account at a Costco store.  In his possession were data records on 90 patients.  Tenet called those patients immediately and has taken the precautionary step of informing the 40,000 patients who's data could have been accessed by Brooks during his employment.

No company can prevent 100% of insider attacks on their information systems or data by employees.  However, companies can do more and increase their employee education, monitoring, and implement stronger policies and controls to ensure that these types of incidents are minimized.


South Florida Sun-Sentinel

http://www.sun-sentinel.com/news/local/palmbeach/sfl-flpfraud0214sbfeb14,0,42801.story

Darkreading
http://www.darkreading.com/document.asp?doc_id=146095

Comments

Search this blog

My Twitter Updates

    follow me on Twitter

    Jaime Chanaga

    • Jaime G. Chanaga, CISSP, CISA is founder and CEO of The CSO Board, a management consulting firm dedicated to helping leaders and organizations solve critical strategic issues make lasting substantial improvements in their performance. He is also an Editorial Advisory Board Member for SC Magazine, proud member of the U.S. FBI's Infragard program, and a former Chief Information Security Officer (CISO) in healthcare. He is co-author of the book “Corporate Security in the Information Age”.

      View my complete profile

    Social Networks

    LinkedIn Skype Twitter