Security audit reveals server containing students’ medical info breached

BURNABY, B.C. – The B.C. Institute of Technology says a scheduled security audit at its Burnaby campus has revealed that a computer server containing students’ medical records has been breached.

The institute says the personal information of nearly 13,000 people who used the campus’s student medical clinic was stored on the server.

BCIT spokesman Dave Pinton says the records, which date from October 2005 to June 11, 2012, include names, birth dates, medical numbers, addresses, phone numbers and possibly information on prescriptions.

He says people who may have been affected by the illegal access to information have been sent a letter from BCIT, which is working with the provincial privacy commissioner to ensure privacy standards are upheld.

Pinton says the server has been taken off line and its hard drives have been removed and analyzed.

He says that so far, it appears the only activity that’s taken place is that movies have been uploaded and downloaded onto the server.