Incident Details
Around 10,000 individuals' personal and health information was unlawfully acquired from Asper Biogene, a genetic testing company based in Tartu, according to the State Prosecutor’s Office. Those impacted are currently receiving notifications, and the Southern Prefectural Criminal Bureau has opened a criminal inquiry to gather evidence. Additionally, the Data Protection Inspectorate has initiated an oversight process against the entity responsible for handling the data. Asper Biogene, a company specializing in hereditary diseases diagnostics, reported the incident to the Police, the State Information System Agency, and the Data Protection Inspectorate on November 11.
Incident
How Did the Breach Happen?
An unauthorized individual gained entry to Asper Biogene's system and obtained multiple documents that included personal details and health information of around 10,000 individuals.
What Data has been Compromised?
The specific information that was obtained is currently undisclosed, although it is confirmed that certain files included results from genetic testing that had been requested by healthcare professionals and individuals associated with the organization.
Why Did the company's Security Measures Fail?
The security protocols of the company were unable to stop the intrusion, resulting in unauthorized entry to their database.
What Immediate Impact Did the Breach Have on the company?
Approximately 10,000 individuals had their personal and health information illicitly downloaded due to the breach. Consequently, authorities have initiated a criminal inquiry, and the company is actively collaborating in the investigation.
How could this have been prevented?
Encrypting or pseudonymizing data within a company can help reduce the impact of breaches. It is crucial for those handling data to uphold its integrity and confidentiality.
What have we learned from this data breach?
The significance of addressing cyber threats with seriousness and safeguarding data is underscored by this breach. It is imperative for all entities handling data to establish strong security protocols to thwart unauthorized breaches.
Summary of Coverage
Approximately 10,000 individuals' personal and health information was illicitly obtained from the database of Asper Biogene. Subsequently, a criminal inquiry has been initiated and the company is actively working to minimize the consequences. This occurrence underscores the crucial requirement for robust security safeguards and data protection procedures in order to thwart unauthorized entry.