University of Louisville kidney patient data was available to public on the INTERNET

A University of Louisville database of 708 names that included social security numbers and dialysis details was available on the Internet without password protection for nearly 1 ½ years, university officials said Wednesday .
http://www.courier-journal.com/article/20100602/BUSINESS/6020403/University+of+Louisville+apologizes+for+releasing+private+information+for+hundreds+of+patients+