<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PlaceName"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Arial;}
span.EmailStyle18
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 78.0pt 1.0in 78.0pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Here’s one as small as a pager:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><a
href="http://www.mightygps.com/miniflextrack.htm">http://www.mightygps.com/miniflextrack.htm</a><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>(No, I have no connection to this
product/company, I googled it up…)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>-Max<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> <st1:PersonName
w:st="on">Max Hozven</st1:PersonName> <br>
<b><span style='font-weight:bold'>Sent:</span></b> Tuesday, June 10, 2008 3:18
PM<br>
<b><span style='font-weight:bold'>To:</span></b> David Metcalf; 'lyger';
dataloss@attrition.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> RE: [Dataloss] (update): <st1:State
w:st="on"><st1:place w:st="on">Utah</st1:place></st1:State> hospital billing
records from over 2million patients stolen</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Maybe customers should put in a GPS
tracking device in each of their tape boxes (or one box in each<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>shipment of boxes).<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>At least if the box isn’t stolen (and
the GPS discarded/trashed/etc), they would have a chance at tracking<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>the location (or last tracked location) of
a tape box.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>-Max<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
dataloss-bounces@attrition.org [mailto:dataloss-bounces@attrition.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>David Metcalf<br>
<b><span style='font-weight:bold'>Sent:</span></b> Tuesday, June 10, 2008 2:49
PM<br>
<b><span style='font-weight:bold'>To:</span></b> 'lyger';
dataloss@attrition.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [Dataloss] (update): <st1:place
w:st="on"><st1:State w:st="on">Utah</st1:State></st1:place> hospital billing
records from over 2million patients stolen</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>I
cannot believe that they are only offering a $1,000 reward for return of the
tapes "no questions asked."<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><a
href="http://healthcare.utah.edu/publicaffairs/news/current/billing_theft.html">http://healthcare.utah.edu/publicaffairs/news/current/billing_theft.html</a><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>The
website of the security company that lost the tapes is also interesting.
It shows impressive pictures of their storage vault which was “designed
to be an impregnable fortress” and can even withstand a nuclear
blast. Unfortunately, the employee never made it that far.<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><a
href="http://www.perpetualstorage.com/index_home.htm">http://www.perpetualstorage.com/index_home.htm</a><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>Another
example of human error overcoming the most rugged technological
precautions. Or as Mom used to say, “No system is fool
proof.”<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>David<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>-----Original
Message-----<br>
From: dataloss-bounces@attrition.org [mailto:dataloss-bounces@attrition.org] On
Behalf Of lyger<br>
Sent: Tuesday, June 10, 2008 5:07 PM<br>
To: dataloss@attrition.org<br>
Subject: [Dataloss] (update): <st1:place w:st="on"><st1:State w:st="on">Utah</st1:State></st1:place>
hospital billing records from over 2 million patients stolen<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>http://www.kutv.com/content/news/local/story.aspx?content_id=76de0817-3ffe-4f8e-9764-506795954fa1<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>Billing
records of 2.2 million patients at the <st1:place w:st="on"><st1:PlaceType
w:st="on">University</st1:PlaceType> of <st1:PlaceName w:st="on">Utah</st1:PlaceName></st1:place>
<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>Hospitals
and Clinics were stolen from a vehicle after a courier failed to <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>immediately
take them to a storage center, authorities said Tuesday.<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>The
records, described only as backup information tapes, contained Social <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>Security
numbers of 1.3 million people treated at the university over the <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>last
16 years, said Lorris Betz, senior vice president for health <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>sciences.<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>Betz
said people would be notified by a letter at a cost of $500,000 just <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>for
stamps and envelopes. The hospital also pledged free credit <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>monitoring.
<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>[...]<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>_______________________________________________<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>Dataloss
Mailing List (dataloss@attrition.org)<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>http://attrition.org/dataloss<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>Tenable
Network Security offers data leakage and compliance monitoring<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>solutions
for large and small networks. Scan your network and monitor your<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>traffic
to find the data needing protection before it leaks out!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=3 face=Arial><span style='font-size:12.0pt'>http://www.tenablesecurity.com/products/compliance.shtml<o:p></o:p></span></font></p>
</div>
</body>
</html>