Someone's laptop was stolen at the hospital with all my personal information!!

[alrightstill]

So I got a letter in the mail today from the center that I had my first transplant at in 1995.  This is the same center that I've been listed at the longest since the demise of my last transplant (7 years now) and also the only transplant center out of the 4 I'm listed at that I HAVEN'T received a call for a new kidney offer from.. but I digress.

The letter today stated that someone's laptop was stolen and on the laptop contained everything about me.  My address, my blood type, my sex, my race and my SOCIAL SECURITY NUMBER!!!     They said the info is password protected but of course with the amazing hackers out there - there's the possibility they could crack it.

As compensation (cough) they're giving me a year's worth of that identity protection thing you've seen commercials for on TV.

I know of course, this is a risk one has to take in life and there's really nothing you can do.  But.. I feel so violated!   

[jbeany]

When are they going to stop letting them put any personal patient info on something as portable as a laptop?

[Restorer]

If it really is password protected with any decent encryption, the chances of cracking it are very small. These days encryption is quite secure, despite what they show on TV, as long as it's done right. However, it makes me nervous that they sprung for an identity theft protection service, because it makes me think they're not confident in their technical protection. Amateur protection schemes can be easily circumvented, and simple password protection could be vulnerable to a poor password choice or an inside job.

Just cross your fingers that it's a good industry-standard encryption technique, because those, mathematically, take decades or centuries to break by brute force on average, even if the cracker is lucky.

I hope you never have to deal with the possible consequences of this.

[Chris]

The sad part that these idiots didn't do is put a lojack on all their laptops. Yes it cost money to lojack all their laptops, but the price is worth it for security and patients piece of mind, plus the ability to get the laptop back. A year of identity protection is nothing. Identity protection really doesn't help once that information is out there and  passed on to others which would last more than a year. That type of information should have never been on a laptop in the first place, there was no need for someone to be traveling with all that info.

[alrightstill]

Yeah... I feel like I should do something though.  I don't know if I should sue.. change my bank account information, cancel my credit cards.. I'm still kind of in "wtf" mode.   

Another thing - the letter is dated November 26th.  Yet - it says:

"To date, we have received no complaints or other indication that any of the information on the lapt was accessed or used."

So - just exactly how long have they known about this?

Also just noticing the bottom - I was so amped up earlier I didn't even read it. 

"[name of hospital witheld] considers security of patient information to be of utmost importance and regularly performs review of its security systems.  In addition, since this incident [the hospital] is implementing additional security measures, including encryption on laptop computers, to help ensure that this problem does not occur again in the future.  We apologize for this inciden and are available at [phone number] to answer questions you may have". 

 

[HSM]

I'm sorry it happened to you. It's a real shame.

[Chris]

Ohhh, now they implementing encryption, WTF took them this long to do that. Geez this hospital is really behind the times and their IT person should be fired or the boss that didn't head the advice of the IT person.
I would notify your bank though so they are aware of this and also your credit card comany. Don't wait till something happens, be as proactive as you can.

[jessup]

WTF
I would be complaining to the govt health authority, newspapers, media etc.

There response is not good enough!
Oh their compensation is ...... not good enough either !!