TribLIVE

| Opinion/The Review


 
Larger text Larger text Smaller text Smaller text | Order Photo Reprints

The UPMC data breach: Larger questions

Daily Photo Galleries

Wednesday, June 4, 2014, 9:00 p.m.
 

Serious concerns raised by UPMC's April announcement that hackers had stolen 27,000 employees' personal information from its payroll system are only heightened by word that all of UPMC's 62,000 workers could have been affected.

The question of how this could have happened in the first place looms larger. So do questions about UPMC's grasp of its own data security and its response to this hack.

After all, UPMC said it learned of the breach when employees reported fraudulent tax returns had been filed using their identities. And with federal prosecutors, the IRS, the Secret Service, the U.S. Postal Inspection Service and police investigating, UPMC now says it was informed by authorities that all employees could have been affected. Why didn't UPMC detect the breach — and realize how extensive it was — on its own?

When hackers hit health care, patient or payment records — not payroll data — usually are stolen, according to Larry Ponemon, president and founder of the Ponemon Institute, a Michigan cybercrime research organization. “Employee data,” he says, “tends to be better protected.” Why wasn't UPMC employees' payroll information “better protected”?

Those responsible for this hack must be brought to justice, of course. And UPMC, owing its employees far better payroll security, must take a more proactive approach to avoid a repeat of this data breach, which its 62,000 employees never should have had to worry about.

 

 
 


Show commenting policy

Most-Read Editorials

  1. The turnpike scandal: More wet noodles
  2. Sunday pops
  3. The Box
  4. Obama’s amnesty: Abuse of power
  5. The Kathleen Kane chronicles: The Pa. attorney general’s credibility is gone
  6. Taxing policies
  7. Pittsburgh Tuesday takes
  8. The Thursday wrap
  9. Slaughter in Israel: Obama’s legacy
  10. The Wounded Warrior scandal: Fire Philip Burdette
  11. Pittsburgh Laurels & Lances
Subscribe today! Click here for our subscription offers.