Vincent Arnold

Concord (NH) Hospital has informed more than 9,000 patients that their personal information was exposed on the Internet for at least a month.

Concord Hospital learned of the breach from a Bellevue, Washington-based online billing subcontractor on May 30, 2007; patients were notified more than a week later.  The compromised data include names, addresses, dates of birth and SSNs.  The data were exposed when a firewall was turned off for maintenance.  Medical information was not exposed, but the hospital president and CEO says there’s no way of knowing whether or not the information has been stolen.

Source: Concord Monitor

This entry was posted on Wednesday, June 13th, 2007 at 7:25 pm and is filed under Security Breach.