The Portland Press Herald reports that Portland, Maine, city officials are apologizing after providing a list of patients enrolled in an HIV-positive health program to researchers at the University of Southern Maine without the patients' consent. Meanwhile, both the University of North Carolina and a health care practice in Louisville, Kentucky, have reported data breaches resulting in a combined impact on the medical records of 56,000 patients. Finally, after failing to inform the U.S. Department of Health and Human Services of a data breach involving 47,000 patients, Oklahoma’s Department of Human Services has issued its second data breach notification to appropriately inform those who may be impacted by the breach. 
Full Story