Swiss health insurance company CSS sent billing data to wrong customers
Responsible body: Swiss health insurance CSS
Type of data mishap: billing data sent to the wrong customers
Data breach at CSS, once again thousands of billing data have been sent to wrong customers via the online portal of the Swiss health insurance CSS. In the process, complete strangers have had access to the highly sensitive health data of others. According to projections, this could have affected about 12,000 accounts per year.
The health insurance company has already taken measures to ensure that this mistake is not repeated. However, the Office of the Federal Data Protection Commissioner sees no need for further action for the time being.
Categories of data concerned: Health data
Classification in practice: Highly sensitive data
Country: Switzerland (safe third country)