This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 3660 To_xml

SUMMARY

5,994 patients' names, addresses, hospital account numbers, medical record numbers, diagnostic codes and treatment codes on laptop stolen from employee vehicle
Records 5,994
Record Types NAA MISC MED ACC
Breach Type Stolen Laptop
Data Family Electronic
Source Outside
Organization Speare Memorial Hospital
Other Affected/Involved Organizations None
Lawsuit? NO/UNKNOWN
Data Recovered? NO/UNKNOWN
Arrest? NO/UNKNOWN
Submitted By: Dissent

TIMELINE

DateEvent
2011-04-03 Incident Occurred
2011-04-04 Incident Discovered By Organization
2011-05-03 Organization Reports Incident
None. Add Data Organization Mails Notifications
None. Add Data Records Recovered
None. Add Data Lawsuit Filed
None. Add Data Arrest Made

SIMILAR INCIDENTS

recordsdateorganizations
5,000 2006-06-30 Washington Regional Medical Center
8,000 2006-08-29 Compass Health
9,000 2006-09-24 Nagasaki University Hospital of Medicine and Dentistry
7,800 2007-02-19 Seton Family of Hospitals

MAP OF INCIDENT LOCATION

Address: Boston, MA, USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate 1 $359,640.00
  1. Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

COMMENTS

by Anonymous on 2011-06-02 (12 months ago)

Ponemon shows a per record cost of $282.00 for the healthcare industry. Why are you using a $60.00 per record cost?

by jkouns [Master Researcher] on 2011-06-03 (12 months ago)

As you know, there are debates as to what the correct estimates per record. We tried to pick a number from the 2009 report that would apply to all incidents in DataLossDB and was tied to actual direct costs. Thanks for the reminder as we should update this to $73 dollars of direct cost per record from the 2010 report.

by Anonymous on 2011-06-22 (11 months ago)

Actually Ponemon says $214 per record across all verticals.

by Anonymous on 2011-07-06 (11 months ago)

That $214. per record is an industry average and Healthcare was the highest for all industry sectors at $282. per record for that year. I would think it would be more meaningful to list overall costs vs. initial direct costs since Ponemon is capturing the higher figures based on all factors and what it has actually cost organizations listed in their studies.

New Comment

captcha
Are you human?

Incidents:

Data Types:

Sectors:

Sources:

Breach Types:

Sponsored By: Rbs Tenable Zecurion
Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation requires authorization and potential licensing arrangements. For more information, please e-mail officers@opensecurityfoundation.org with a brief summary of how you would like to use this information; product, service, research, etc.
© 2005 - 2012, Open Security Foundation, All Rights Reserved.