Microsoft blamed for million-plus patient record theft at US hospital giant

A former employee at a Microsoft subsidiary, Nuance Communications, is accused of stealing highly personal data from over a million Geisinger patients. The breach was discovered in November, with the ex-employee accessing and copying sensitive records two days after being terminated. The stolen information includes birth dates, addresses, hospital records, and demographic data, but not financial details. Nuance conducted its investigation and estimated the theft to involve data on a million-plus individuals. Geisinger promptly informed Nuance and law enforcement, leading to the former employee's arrest and facing federal charges. Microsoft, the parent company of Nuance, is cooperating with authorities. This incident raises concerns about data security practices within Microsoft and its subsidiaries, especially in light of previous security lapses. Geisinger is working closely with authorities on the investigation, emphasizing the importance of data protection and privacy in healthcare settings.