Home > The Data Breach Blog
The Data Breach Blog

Retired Ohio pension fund employee improperly emails himself database

time Posted August 28, 2008 * Comments(0)

A retired Ohio Police & Fire Pension Fund employee improperly emailed himself the contents of a database containing the personal information of 13,000 retired police officers.

What type of personal information? Names, addresses, Social Security numbers.

What was the response? The state sent notification letters to victims.

Details: Officials do not believe the unidentified former employee was going to use the database for malicious reasons, so police do not plan to charge him.

Source: cincinnati.com, Cincinnati Enquirer, “Database security breached,” Aug. 27.

Related Posts
  • Personal information of Ohio Masonic Home employees at risk after laptop theft
    The personal information of about 600 employees of Ohio Masonic Home was on a laptop stolen from aud...
  • St. Mary’s hospital database breach exposes 128,000
    The personal information of thousands of clients and patients of St. Mary's Regional Medical Center ...
  • Update: Ohio data breach more serious than first thought; sensitive information of 370,000 stolen
    What’s new? Reports had stated that the personal information of all 64,467 state employees was com...
  • Laptop to go: Thief makes off with NYC retirees’ info from Korean restaurant
  • Hacker obtains contact information of 6.3 million TD Ameritrade customers

Filed under: Breaches, Government

Paper jam causes welfare letters to go to wrong homes

time Posted August 28, 2008 * Comments(0)

A paper jam in a mail-inserting machine is being blamed for 2,845 welfare benefit renewal letters going to the wrong welfare recipients in Pennsylvania.

How many victims? 1,280 of the packets contained Social Security numbers.

What was the response? The state Department of Public Welfare has mailed notification letters to victims and placed a 90-day fraud alert on their credit files.

Details: The department is working with the inserter manufacturer to determine what went wrong. As a new policy, the vendor will hand check every 50th packet to ensure it is going to the right destination.

Source: pennlive.com, The Patriot-News, “Welfare renewals take a wrong turn,” Aug. 26.

 

Related Posts
  • Pennsylvania public welfare agency computers stolen
    Where did the breach occur? Pennsylvania Department of Public Welfare in Harrisburg. What happened?...
  • Ga. health insurer sends benefit letters to wrong people
    Blue Cross and Blue Shield of Georgia accidentally mailed 202,000 benefit letters to the wrong addr...
  • Wrong families receive health care information
    The sensitive information of more than 1,500 families enrolled in Alabama's ALL Kids health care pro...
  • Texas Lottery Commission experiences data breach of more than 100,000
  • Canadian credit union data tapes stolen in transport to backup facilities

Filed under: Breaches, Government

Perfect score for crooks? Princeton Review publishes test-taker personal data

time Posted August 21, 2008 * Comments(0)

Standardized exam preparatory company The Princeton Review errantly posted the personal information and test scores of more than 100,000 Florida and Virginia students on its website.

What type of personal information? Names, birth dates, ethnicities, test scores.

How many victims? One filed contained data on 34,000 public school students in Sarasota, Fla., where the school district was using The Princeton Review to measure student performance. Another exposed file contained the names and birth dates of 74,000 students in the Fairfax County, Va. school district, which had hired the company for a similar reason.

What happened? The company moved its website to a new internet provider in June, which may have caused password protection to be lost and the files to be publicly accessible, The Princeton Review said.

Details: The company is investigating how many people may have accessed the files.

Source:nytimes.com, The New York Times, “Student Files Are Exposed on Web Site,” Aug. 19.

Related Posts
  • Server hack compromises Voxant online store
    Where did the breach take place? Reston, Va. What happened? Hackers breached the e-commerce server ...
  • Gotcha: Privacy group discovers USC students’ private info on web
    Where did the breach take place? University of South Carolina (USC) in Columbia. What happened? Stu...
  • Hackers compromise confidential info of Harvard grad students, applicants
    Hackers breached the server of Harvard University's Graduate School of Arts and Sciences, potentiall...
  • Former U. of Iowa TA’s laptop stolen; contains personal information of 184 students, graduates
  • Personal info of 51,000 patients of St. Vincent Indianapolis Hospital compromised

Filed under: Breaches, Education, Retail

Marketing services provider has server hacked

time Posted August 21, 2008 * Comments(2)

Hackers broke into a computer server belonging to Norfolk, Va.-based Dominion Enterprises, possibly exposed the personal information of tens of thousands of people.

How many victims? 92,095 applicants who submitted credit applications to the InterActive Financial Marketing Group, a division of Dominion.

What type of personal information? Names, Social Security numbers, addresses and birth dates.

What happened? The company is remaining tight-lipped on specifics, only saying that the intrusion happened between November 2007 and February 2008.

What was the response? Dominion is notifying victims via letter and plans to offer them one year of free credit monitoring.

Quote: “We deeply regret this incident and apologize for the concern and inconvenience it has caused.” - Dominion President and CEO Conrad Hall

Source: Business Wire news release, MarketWatch.com, “Dominion Enterprises Discloses Data Breach in Business Division,” Aug. 18.

Related Posts
  • Third-party employee steals personal information of 2.3 million Fidelity National Information Services employees
    Who are the victims? 2.3 million customers of Fidelity National Information Services. What happene...
  • Server hack compromises Voxant online store
    Where did the breach take place? Reston, Va. What happened? Hackers breached the e-commerce server ...
  • Montana State University server hacked; officials unsure if data was stolen
    A hacker breached a Montana State University server containing the names and personal information of...
  • Server breach exposes identities of students, staff
  • University of Georgia server hacked

Filed under: Breaches, Finance

Cable TV company employees might be at risk after laptop thefts

time Posted August 15, 2008 * Comments(0)

The confidential information of current and former employees of Charter Communications was being stored on laptops that were stolen.

How many victims? More than 9,000 employees nationwide.

What type of personal information? Names, Social Security numbers, birth dates and driver’s license numbers.

What happened?Several laptops were stolen last month from the cable provider’s Greenville, S.C. office.

What was the response? The company is offering victims one year of free credit monitoring.

Details: Charter said it has no reason to believe any of the information will be misused. Police are investigating the theft.

Source: wyff4.com, WYFF-TV, “Laptops with cable company workers’ data stolen,” Aug. 13.

Related Posts
  • Personal information of 159,000 Administaff employees on stolen laptop
    A company laptop containing the personal information of about 159,000 Administaff employees was stol...
  • Unauthorized file-sharing software leads to Pfizer employees’ data exposure
    Where did the breach take place? Pfizer, based in New York. Who are the victims? About 17,000 curre...
  • Personal information of University of Toledo students and staff at risk following computer thefts
    What happened? The personal information of students and staff at the University of Toledo is believe...
  • Oscar Mayer employees at risk for ID theft after laptop theft
  • Stolen laptop compromises personal information of VeriSign employees

Filed under: Breaches, High Tech, Manufacturing

Hackers break into University of Texas at Dallas

time Posted August 1, 2008 * Comments(0)

Hackers may have compromised the personal information of 9,100 students, faculty and staff at the University of Texas at Dallas.

What type of personal information? Names, Social Security numbers, home addresses, email addresses and telephone numbers.

How many victims? 9,100, including 4,406 students who were on the Dean’s List or graduated between 2000 and 2003.

What happened? The university is releasing few details about how the attack occurred.

Quote: “We would like to minimize the impact of such an event, but we find no indication that the information has been disclosed, disseminated or used to anyone’s detriment.” - Jim Gary, the university’s vice president and chief information officer.

Source: dallasnews.com, The Dallas Morning News, “Computer breach at UT Dallas may have exposed students’ personal info,” July 31.

Related Posts
  • Employee fired after laptop containing health care data stolen from her car
    A laptop containing the health care information of about 100,000 patients of Baylor Health Care Syst...
  • U. of Texas students’ personal information available online last month
    The personal information of 22 University of Texas students was available to access on a university ...
  • Texas Lottery Commission experiences data breach of more than 100,000
    Lottery winners, lottery commission employees, retailers and vendors in Texas have been the victims ...
  • Hackers access personal records at University of Indianapolis
  • Two University of Michigan servers compromised

Filed under: Breaches, Education

Ga. health insurer sends benefit letters to wrong people

time Posted August 1, 2008 * Comments(0)

Blue Cross and Blue Shield of Georgia accidentally mailed 202,000 benefit letters to the wrong addresses.

What type of personal information? Patient names and identification numbers, with a small number containing Social Security numbers. Amounts owed and the name of their medical provider also were included.

What happened? “Explanation of Benefit” letters were mistakenly sent to the wrong addresses because of a computer system glitch, which has since been resolved.

What was the response? Victims will receive one year of free credit monitoring. The number of affected people may not be as high as 202,000 because some people received multiple letters.

Details: Blue Cross and Blue Shield may have violated Health Insurance Portability and Accountability Act regulations, experts say. The insurer plans to remove Social Security numbers from all future mailings.

Quote: “This is very, very serious.” - State Insurance Commissioner John Oxendine

Source: ajc.com, The Atlanta Journal-Constitution, “Private medical data exposed,” July 29.

Related Posts
  • Paper jam causes welfare letters to go to wrong homes
    A paper jam in a mail-inserting machine is being blamed for 2,845 welfare benefit renewal letters go...
  • Wrong families receive health care information
    The sensitive information of more than 1,500 families enrolled in Alabama's ALL Kids health care pro...
  • Health benefits company exposes data online
    The personal information of about 128,000 WellPoint customers from several states was publicly avail...
  • CNET employees face identity theft risk
  • Massachusetts regulators mistakenly send out disks with personal information

Filed under: Breaches, Health Care

time The Data Breach Blog

Search This Blog:  


Categories
  • Breaches
  • Education
  • Finance
  • Government
  • Health Care
  • High Tech
  • Manufacturing
  • Non-profit
  • Retail
  • Uncategorized
Authors
  • Angela Moscaritolo (8)
  • Dan Kaplan (63)
Archives
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • Blogroll

    • Absolute Software Laptop Security Blog
    • Attrition.org Data Loss Archive
    • Marco Ramilli’s Blog
    • WordPress.com
    • WordPress.org
Home | News | Newsletters | Products | Blogs | Lists | Jobs | Events | Subscribe | Contact Us | About Us | Advertising | Editorial | Subscribe to our RSS feedsRSS

This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.

Your use of this website constitutes acceptance of Haymarket Media's Privacy Policy and Terms & Conditions