UNC Medical School Reveals Data Breach of Mammography Registry
October 27, 2009 - The University of North Carolina School of Medicine has recently disclosed that, in the year 2007, internet hackers gained access to a database called the Carolina Mammography Registry. Apparently, some of the records contained personal information about patients, including dates of birth and social security numbers. Information for thousands of female
patients who had received mammographies in several North Carolina private practices were added to the database, apparently without the knowledge or permission of those patients.
The data was collected by the UNC School of Medicine to conduct research as part of a national study. The database contained information pertaining to approximately 236,000 women. UNC reported that the breach included the records of more 163,000 of those women. The information was retained on a server to be accessible to researchers who were a part of the study. The goals of the study were to improve breast cancer detection, understand risk factors, guide future research, and inform policy makers. The database was part of a national study funded by the National Institute of Health's National Cancer Institute.
It appears that t
he IT department at UNC discovered the breach in July, 2009, when
researchers could not access the database. Viruses were discovered, which dated back to 2007. UNC's IT department immediately took down the server and removed all of the information that had been previously posted. The UNC School of Medicine then began contacting women who they believed may have been affected by the breach. Two different letters apparently went out to women whose information had been exposed; one letter to women whose Social Security Number was in the database, and one letter to women whose number was not.
Both UNC and outside law enforcement officials are investigating the breach, but thus far have not been able to determine if any information was removed, or who was responsible for the breach. Apparently, the investigation remains open at this point.
Information Sources: UNC School of Medicine, esecurityplanet.com
Continue reading "UNC Medical School Reveals Data Breach of Mammography Registry" »

