data breach

The health insurer unintentionally exposed the personal data of 4.7 million people to Google through a misconfigured analytics tool used between 2021 and 2024.

According to a data breach notification, Monument said it used pixel-tracking technologies from third parties like Meta, Google, Bing and Pinterest. More than 100,000 users were affected.

The data breach occurred when the company requested users acknowledge they had received a notice about a recall of the Omnipod DASH Insulin Management System.

HIMSS Media editors discuss last week's big news story.

Companies failing to tell users about a breach could face a $43,792 per day hit. 

The exposed records included user data on name, birthdate, weight, height, gender and location.

The error allowed a patient to access video recordings of another patient’s consultation. 

Prescription drug information and names were exposed, but financials and Social Security numbers were not. 

In a statement, Dr. Scott Gottlieb detailed his agency’s ongoing cybersecurity efforts, which include the signing of two “significant memoranda of understanding” and discussions to facilitate collaboration across government agencies.

Genealogy and DNA testing service site MyHeritage is notifying 92,283,889 users that their account information was compromised.