http://endh1b.com/Web/blogs/endh1b/arch ... -hack.aspx

HCL, Indian Outsourcer, Tied To Massive Hack

EndH1B.com Blog

"In 2007, Virginia signed an outsourcing contract for content management systems with HCL America Inc., ( download pdf) which is part of HCL Technologies Ltd. in Noida, India. The Virginia Information Technologies Agency does allow work to be performed at HCL facilities in India though individual agencies can add security requirements for offshore work, said Jerry Simonoff, director of IT investments and enterprise solutions for VITA."

http://news.idg.no/cw/art.cfm?id=58F0A0 ... 95F2FC3B90

"Some doctors are holding off prescribing painkillers after a hacker accessed more than 35.5 million of Virginia's most sensitive prescription drug records two months ago, a state official told a legislative panel Monday.

Lawmakers probing the state's computer services bureaucracy, the Virginia Information Technologies Agency, also learned that its former director was dismissed earlier this month after refusing to pay VITA's contracted partner, which had missed key deadlines.

Hearings Monday by the House Science and Technology Committee and a Senate Finance technology subcommittee focused on VITA and its $10-year, $2.4 billion contract with Northrop Grumman after years worth of state agencies' complaints over high costs and long service delays they have experienced from the partnership.

Lawmakers intensified their scrutiny of the six-year-old agency created to consolidate the state's diverse and far-flung computer systems after the Prescription Monitoring Program was hacked on April 30 and after the dismissal of former VITA chief Lemuel Stewart.

With the prescription database still offline two months after it was accessed because of FBI and state criminal investigations and work to upgrade the system, some doctors are reluctant to prescribe highly addictive painkillers such as Oxycodone, Vicodin, morphine and Valium, said Sandra Whitley Ryals, director of the Department of Health Professions.

"I do not have any indication, however, of how many that might be," she told the panel.

Later, she downplayed the magnitude, describing calling the reports sparse and anecdotal. She said the department has gotten no complaints from patients being denied needed drugs.

"I do know that our prescribers, mostly physicians, have grave concerns about not being able to access the information," she said. They were being asked "to use their best judgment," she said.

The database was established for professionals who prescribe painkillers, the pharmacists who fill the prescriptions and police to flag abuse and theft.

Among the information accessed were names, birth dates and addresses of people who received the prescriptions and, in an undetermined number of cases, Social Security numbers, the single bit of data most valuable to an identity thief.

The Department of Health Professions mailed notices to 530,000 people that their information may have been stolen and urging them to check their credit scores, bank accounts, credit cards and other vulnerable assets."

http://sg.news.yahoo.com/ap/20090630/tb ... 79e03.html