1/14/2010
Some security breach issues making the news . . . .
The Connecticut Attorney General has filed a lawsuit against Health Net of Connecticut, alleging that Health Net failed to properly secure patient medical records and financial information of 446,000 Connecticut residents. The breach involved unencrypted data stored on a portably computer disk drive that disappeared from one of the company's offices. I've previously blogged about this breach, but this is noteworthy because this is the first lawsuit filed by a state attorney general under the new enforcement rights extended by the HITECH Amendments to HIPAA. It will be interesting to see how it is resolved and whether other state attorneys general will be filing enforcement actions any time soon.
Read more of this entry on Norbert's blog: http://privacy.wnj.com.