Abstract
In October 2001, the University of Montana was involved in a well-publicized incident in which confidential medical records were exposed to public viewing from its Web site. The presentation will review how this occurred--and can occur at any institution, what changes UM has made in response, and what other organizations can learn from this incident.