Shostack + Friends Blog Archive


Minnesota, 2,000 medical records, hacker

The Duluth News Tribue is carrying a story, “State’s Web systems bogged down:”

[Monicq] Feider, [manager of the Health Professionals Services Program] disclosed the problem in a March 31 letter sent to nearly 2,000 health professionals.

“The case management system database includes private and public information about you,” she wrote. “The security company believes that the primary purpose of the attack was most likely to use our system to launch additional attacks against other organizations. The security company also reported that the breach may have been used to seek data for the purpose of identity theft.”

The database includes names, addresses, dates of birth and illnesses of the health workers. It also includes names and phone numbers of people who referred them to the program.