A three-month intrusion at the largest US public health system took biometric records among the 1.8 million affected. Credit monitoring does not cover a palm print.
A reported $100 million demand against a Japanese teaching hospital, and about 131,700 people. Only one of those numbers means anything.
Nineteen days inside a dialysis provider, 2.7 million records taken, and treatment never stopped. The continuity is the underreported part.
Nine drives went missing in a contractor’s data centre. Six were never found, and the record never established whether anyone took them.