The Independent Group of Public Ambulatory Care Institutions Warsaw-Ochota
We inform that on the 8th of August 2023, an employee of SZPZLO Warsaw-Ochota sent an email to a patient of SZPZLO Warsaw-Ochota with an attachment containing personal data of patients (foreign nationals) of SZPZLO Warsaw-Ochota, including PESEL number, first and last name, age. The unauthorized disclosure constitutes a violation of the protection of personal data under Article 4(12) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119 of 04.05.2016, page 1, Official Journal of the EU L 127 of 23.05.2018, page 2 and Official Journal of the EU L 74 of 4.03.2021, page 35). The disclosure involved adding an unauthorized email address to the mailing list. The unauthorized person has informed us that they received such a list. Please be informed that SZPZLO Warsaw-Ochota has notified the supervisory authority about the breach. We deeply apologize for the situation that has arisen.
Personal data breach - potential consequences
The consequence of the personal data breach may be the occurrence of material or non-material damages: loss of control over data, theft or falsification of identity, financial loss – data can be used to create accounts on social networking sites, attempts to make future loan agreements, credit agreements, or contracts with a telecommunications operator. To minimize potential effects of the personal data breach, we suggest taking the following actions:
News
Notification of personal data breach dated August 8, 2023.
We inform that on the 8th of August 2023, an employee of SZPZLO Warsaw-Ochota sent an email to a patient of SZPZLO Warsaw-Ochota with an attachment containing personal data of patients (foreign nationals) of SZPZLO Warsaw-Ochota, including PESEL number, first and last name, age. The unauthorized disclosure constitutes a violation of the protection of personal data under Article 4(12) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119 of 04.05.2016, page 1, Official Journal of the EU L 127 of 23.05.2018, page 2 and Official Journal of the EU L 74 of 4.03.2021, page 35). The disclosure involved adding an unauthorized email address to the mailing list. The unauthorized person has informed us that they received such a list. Please be informed that SZPZLO Warsaw-Ochota has notified the supervisory authority about the breach. We deeply apologize for the situation that has arisen.
Personal data breach - potential consequences
The consequence of the personal data breach may be the occurrence of material or non-material damages: loss of control over data, theft or falsification of identity, financial loss – data can be used to create accounts on social networking sites, attempts to make future loan agreements, credit agreements, or contracts with a telecommunications operator. To minimize potential effects of the personal data breach, we suggest taking the following actions:
- Create an account on the BIK portal and activate BIK alerts
- Notify the Police if you ascertain identity theft or suspect such an event
OSIĄGNIĘCIA I WYRÓŻNIENIA
