Covid Test Data Breach: 1.3M Patient Records Exposed Online

I feel frequent data leaks, credit card number leaks, difficulty in un-subscribing or stopping payments after subscribing, etc... makes me appreciate and want to use consolidated sign in / subscription management / payment management options almost exclusively.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#7

Post by FrustratedMonky » Tue, Jan 30, 2024, 4:29 PM UTC

Not US Gov.

-> ""The exposed certificates and other documents were all marked with the name and logo of Coronalab.eu. Although the website appears to be offline, Coronalab is owned by Microbe & Lab, an ISO-certified laboratory based in Amsterdam, Netherlands. According to the NL Times, “CoronaLab is one of the two largest commercial test providers in the Netherlands”.""

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#8

Post by zanfr » Tue, Jan 30, 2024, 4:35 PM UTC

tlivolsi wrote: post #4

[flagged]

[flagged]

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#9

Post by bryanlarsen » Tue, Jan 30, 2024, 4:49 PM UTC

manzanarama wrote: post #6

I feel frequent data leaks, credit card number leaks, difficulty in un-subscribing or stopping payments after subscribing, etc... makes me appreciate and want to use consolidated sign in / subscription management / payment management options almost exclusively.

Until there's a breach of the SSO providers, like the Okta incident.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#10

Post by toyg » Tue, Jan 30, 2024, 4:50 PM UTC

manzanarama wrote: post #6

I feel frequent data leaks, credit card number leaks, difficulty in un-subscribing or stopping payments after subscribing, etc... makes me appreciate and want to use consolidated sign in / subscription management / payment management options almost exclusively.

It's a bit like keeping money... You can stash it under your mattress, hoping you'll never suffer a burglary; or you can give it to a bank, and let them spend money on security and insurance.

This said, banks have specific fiduciary responsibilities and the above-mentioned insurance, which compensate for the big target they're painting on their own backs; whereas most tech services, even massive ones, tend to hide behind service agreements boiling down to "eh, if it happens it happens, nothing we can do, sucks to be you". Unless they're in healthcare, they're barely required to disclose whether they've been breached, let alone compensate us for the loss of privacy and increased risk of identity fraud that we endure.

Maybe it's time for the legislator to define "personal data providers" a bit more rigorously.