Dental contractor set up secret account with access to 4,000 patient records then left the company
Summary
A dental contractor secretly set up an unauthorized account with access to the records of 4,000 patients before leaving the company. The breach was discovered when the company conducted an IT audit.
IFF Assessment
FOE
The unauthorized access to patient data by a former contractor represents a significant security lapse and potential privacy violation.
Defender Context
This incident highlights the critical importance of robust access management and offboarding procedures. Organizations must ensure all user accounts, especially those with privileged access, are properly terminated when an employee or contractor departs to prevent unauthorized data access.