The massive UC Berkeley data breach exposed the sensitive health information of more than 160,000 Berkeley students, alumni and others who used the school s health system. Berkeley officials said that the breach did not expose the victims treatment information, an assertion that is leaving some security experts wondering exactly what constitutes sensitive data. Even if you don t know my diagnosis, which doctors I saw still leaks potentially sensitive information about my medical history, Eric Rescorla points out on his Educated Guesswork blog.
Source: https://threatpost.com/who-decides-what-health-data-sensitive-051109/72696/