Boston-based Partners HealthCare System is the latest organization to disclose a breach. Breach notification comes five months after a phishing email attack exposed 3,300 patients’ Social Security numbers and clinical details. The organization waited until April 30 to begin mailing breach notifications to what it says are “affected patients” A five-month delay might seem onerous, but it isn’t illegal in most other sectors. Congress continues to discuss creating a federal data breach notification bill to replace patchwork of state laws that are in place.”]
Source: https://www.cuinfosecurity.com/6-questions-about-partners-breach-a-8191