Canada's Region of Peel recently began notifying more than 18,000 people that their personal data may have been exposed when an unencrypted SD card was stolen from a Health Services employee's car (h/t PHIprivacy.net).
The employee reported the SD card missing on September 24, 2013, though it may have been stolen as early as September 20.
The SD card contained the names, addresses, birthdates, marital status and assessment information of more than 18,000 clients who participated in Peel Public Health's Healthy Babies Healthy Children program between March 2010 and August 2011, along with information on 46 clients from earlier dates.
"I want to reassure the public that this was an isolated incident," Emil Kolb, chair of the Region of Peel, said in a statement. "It is not standard or acceptable practice for us to put client information on unencrypted devices. As part of our investigation into this breach, we will be examining all of our privacy and protection protocols, and tightening controls on the information that has been entrusted to us."