Released on March 27, 2012
eHealth Saskatchewan is reviewing its internal security policies and procedures after computers slated for recycling or reuse were mistakenly allowed to be picked up by a computer refurbishing company before the hard drives had been removed and shredded.
When it became aware of the incident, the Treasury Board Crown corporation immediately alerted Saskatchewan's privacy commissioner, and has been working to recover the hard drives involved and determine if any private or confidential information was put at risk.
Approximately 44 computers were inappropriately released from eHealth. So far, 32 hard drives have been recovered. The recovered hard drives are going through a forensic analysis to determine if any personal or personal health information was on the hard drives; an initial examination of some of the recovered drives indicates that no information had been accessed after the computers were released. About 12 hard drives have not been recovered.
eHealth Saskatchewan immediately notified the province's Privacy Commissioner and the Ministry of Health.
"We are taking this incident very seriously," eHealth Saskatchewan CEO Susan Antosh said. "I am relieved that so far we have not turned up any privacy breaches, but the fact that a number of hard drives still haven't been recovered concerns me. We are examining the circumstances that led to this incident, and will put in place whatever measures are needed to ensure this sort of thing doesn't happen again."
If existing procedures had been followed, the hard drives would have been removed and destroyed before any equipment was released to an outside organization, to prevent unauthorized access to any information that was stored on them.
eHealth Saskatchewan will use the results of its security review to help strengthen its safeguards and ensure the appropriate checks and balances are in place to ensure security processes are consistently followed.
-30-
For more information, contact:
Tyler McMurchy
Health
Regina
Phone: 306-787-4083
Email: tyler.mcmurchy@gov.sk.ca