Queen Mary Hospital has announced that a staff member lost a USB flash drive containing the names and identity card numbers of 19 paediatric patients. An employee noticed the unencrypted memory stick was missing on 18 April. The compromised data was originally stored on a desktop computer and placed on the flash drive before the computer's system was updated. In addition to reporting the incident to the affected patients and the Office of the Privacy Commissioner for Personal Data, the hospital has conducted "an in-depth investigation" and has taken "appropriate disciplinary action" against the staff member, according to a Hospital Authority press release.
Full Story