29 JUNE 2018
HealthEngine takes data privacy concerns on board, affirms commitment to best outcomes for patients
0414 236 791
Level 1, Brookfield Place Tower 2
123 St Georges Terrace
Perth WA 6000
PS. Just after this release arrived we also have this appear:
HealthEngine reveals data breach
Patient feedback information 'may' have been accessed.HealthEngine has revealed a data breach in which 59,600 pieces of patient feedback “may have been improperly accessed”.
The company, which acts as an online booking engine for medical practices, said it had notified those affected as well as the Office of the Australian Information Commissioner.
It blamed the breach on “an error in the way” its website operated, saying that information “ordinarily not visible to users on the site” was accidentally exposed in the webpage’s code.
Of the 59,600 pieces of feedback, 75 contained identifying information about a site user.
However, the company said no usernames or passwords were impacted and “no action is required to be taken by users of the site”.
“HealthEngine has worked around the clock to investigate how the information was improperly obtained, what patients might have been affected, and the steps required to further address the matter,” CEO Dr Marcus Tan said in a statement.
Not a good look.