Nude “before and after” photos stolen from plastic surgeon, posted online, and sent to victims’ family and friends::The FBI is investigating a data breach where cybercriminals were able to steal patients’ records from a Las Vegas plastic surgeon’s office and then publish them online.
Found the info I was looking for in the article. The documents did not appear to be stored with any kind of encryption… so yeah this was terrible it happened, but it happened partially due to not spending enough on IT resources to guide them on proper practices for handling documents with confidential information and violated HIPAA. As someone who works in the field all patient information must be encrypted at rest or another form of encryption on the data must exist for it to fall within compliance. On top of this only the bare minimum amount of people should have access to this data and absolutely should have audit logs for anyone accessing the data normally through the 3rd party application used to store and lookup the information.
LWD@lemm.ee 1 year ago
kadu@lemmy.world 1 year ago
naonintendois@programming.dev 1 year ago
HD encryption only helps if they get physical access to the disk when the device is locked or powered off. If they get it via a backdoor or virus, then it doesn’t help.
KairuByte@lemmy.dbzer0.com 1 year ago
That isn’t at all the argument presented by those opposed to “nothing to hide” mentality. You’re simply going from one extreme to the other, and presenting a strawman.