HITRUST discloses breach of 111 records

The Health Information Trust Alliance (HITRUST) informed the public that a compromised web server caused the leak of 111 records, which included some real names, companies, addresses, phone numbers and email addresses, in addition to six encrypted passwords. The files did not contain personal health or other sensitive information, according to the May 28 notice.

The compromised information derived from a test database populated with rosters previously made public from planning meetings during 2008, in addition to some fictitious data created by developers.

In its statement, HITRUST said it had not deemed this web server or test data as requiring higher security, but it has updated its policies to secure test environments and public general information websites at a higher assurance level.

“We sincerely regret any inconvenience this has created and take data security very seriously. It is our mission to protect information and do so in a manner that is appropriate and practical given the risks,” according to the notice.