Swedish Data Protection Authority Fines Medical Service €1.2 Million for a Data Leak

guest · Jun 19, 2021

Swedish Data Protection Authority Fines Medical Service €1.2 Million for a Data Leak
June 15, 2021
https://www.technadu.com/swedish-da...al-service-1-2-million-euro-data-leak/283698/

IMY has fined ‘Medhelp’ for its responsibility in Sweden’s worst data leak incident to date.

The fine was set to almost €1.2 million, while all of the other entities involved were deemed irresponsible.

The incident had resulted in the leaking of 2.7 million voice recordings from 2013 until 2019.

Click to expand...

The Swedish Authority for Privacy Protection (IMY) has imposed a fine of 12 million SEK (€1,190,000) to ‘Medhelp’ for a sensitive data leak. More specifically, ‘Medhelp’ was offering a medical consultation line on 1177 and was recording the calls and storing them on a misconfigured server that didn’t even have a password set up.

As such, it is considered certain that multiple unauthorized users accessed these calls and possibly even exfiltrated thousands of mp3 and WAV files.
Click to expand...

The leak was discovered when a Swedish journalist received a tip from an anonymous source, the entity responsible for the operation of the service, ‘Voice Integrate Nordic AB,’ admitted the mistake and declared that they had not realized it previously.

The accessible database was, in fact, a system used by MediCall. So in practice, they were the ones who made the configuration error. The companies above them were the ones that failed to perform the appropriate checks to ensure the security of the processed data.

The contracted entities failed to ensure data security and follow proper practices.
Click to expand...

Log in or Sign up

Swedish Data Protection Authority Fines Medical Service €1.2 Million for a Data Leak

guest Guest

Log in or Sign up

Swedish Data Protection Authority Fines Medical Service €1.2 Million for a Data Leak

guest Guest

Useful Searches