Reference no: EM132168766
Question: Source: A notification, dated Sept. 26, 2014 emailed to SCMagazine.com
American Family Care is notifying patients that their personal information - including Social Security numbers - may have been stored on two unencrypted, password protected laptops that were stolen from an employee's vehicle in July.
How many victims? Less than 2,500.
What type of personal information? Information related to work-related injuries, physicals, immunizations, or drug screens. On Aug. 15, American Family Care discovered that the laptops may have contained patient names, addresses, dates of birth, phone numbers, medical record numbers, Social Security numbers, medical information, insurance information, driver's license numbers and dates of service.
Please answer the following:
1) What American Family Care weaknesses might have caused the breach? Please list at least 3 possible weaknesses.
2) What should the response be for American Family Care? (lessons learned, how can they prevent future breaches) Please list at least 3 possible activities.