University of Louisville kidney patient data was available to public

This is a case of a Doctor believing that the tool he used protected the data. This seems to me a case where making something too easy results in failure. The fortunate thing is that it is unlikely anyone else noticed.

The information was available so long because the U of L doctor who set up the Web site thought the information was protected by a password and other precautions, Hebert said."It was just a mistake," Hebert said. "It was his understanding it was password protected." More