July 28, 2026
Visit to Library Turned Into a Data Privacy Disaster
Last week I went to print my documents at a public library.
By Meera Tamboli
1 min read
What came out instead was someone else's confidential medical records.
At first, I thought it was part of my print job. But when I looked closely, I realized it wasn't mine.
What I was holding contained someone's:
- Name
- Home address
- Phone number
- Email address
- Allergy information
- Medical concern
- GP visit details, including the date and time
Essentially, I had access to a complete snapshot of this person's private health information.
I immediately handed the documents to the receptionist and asked them to handle them according to their protocol, whether that meant securely disposing of them or returning them to the rightful owner.
But the incident got me thinking.
If those documents had ended up in the hands of someone with malicious intent, the consequences could have been far more serious.
With just that information, someone could impersonate the healthcare provider, launch highly convincing phishing or social engineering attacks, exploit the trust created by referencing real medical appointments, or use the personal details for identity fraud.
Cybersecurity is still associated with hackers, malware and sophisticated attacks.
But sometimes, the biggest privacy risks come from simple operational mistakes.
This was a reminder that protecting sensitive information isn't just about securing systems, it's also about securing everyday processes.
Have you ever witnessed a real-world privacy or security incident like this?