DoH's latest d'oh!
Puts private doctor details on the web
Posted in Public Sector, 26th April 2007 15:09 GMT
Free whitepaper – Blade learning lab and technical community
The Department of Health (DoH) has apologised for its latest IT blunder - publishing private details of applicants for junior doctor posts on an unsecured website.
The Medical Training Applications Service (MTAS) is the computerised HR system for students and junior doctors. But applicants for the foundation course - the first year of medical training - found their personal details, names, addresses, and even sexual orientation and criminal records were revealed.
The statement from the DoH said: "We apologise to any applicants whose details have been improperly accessed. This is a very serious matter and is under investigation.
"This URL was made available to a strictly limited number of people making checks as part of the employment process. This information was never publicly available through the MTAS website and was only accessible for a short period of time after details of the URL were leaked.
"The MTAS team fixed the problem as soon as it was brought to their attention."
But according to Channel 4 News, which broke the story, health minister Patricia Hewitt was warned the site was insecure last month by the British Orthopaedic Trainees Association. ®
Free whitepaper – Deploying high-density zones in a low-density data center

Enabling the Agile Data Center
Analyst Keynote: The Register Agile Data Center Summit

Google Spanner — instamatic redundancy for 10 million servers?
Early adopters bloodied by Ubuntu's Karmic Koala
Fedora 12 polishes Linux for netbooks
Sign up, sign up for The Register IT security newsletter