NCX Group: Reported Data Breach Disclosures

DATE MADE PUBLIC	NAME	IDENTITIES EXPOSED	TYPE OF BREACH
6/21/2009	Beneficial/HSBC, IN	80	Improper Disposal
files containing loan applications were found in a dumpster, complete with names, Social Security numbers and even bank account numbers, were found in a dumpster.
6/18/2009	Georgia Crime Information Center/Clayton County Sheriff	"Unknown"	Dishonest Employee
An employee took home a stack of documents, which was found in her car during a traffic stop, that contained names, phone numbers, dates of birth and Social Security numbers.
6/15/2009	Beam Global Spirits & Wine Inc	"Unknown"	Hacking
A former employee was able to access Beam Global's human resources database containing the names, addresses, and Social Security numbers of several current and former employees.
6/14/2009	Custom House Coffee	50	Hacking
Hackers used spy software to break into the store’s wireless network and steal the credit and debit card numbers of customers.
6/12/2009	JFY Networks	"Unknown"	Hacking
A hacker gained access to names, addresses, telephone numbers, and Social Security number from a website application.
6/12/2009	Charles Schwab & Co	60	Stolen Hard Drive
Client names, Social Security numbers and account numbers were on a hard drive stolen from an employee who took the drive home.
6/12/2009	Kirkwood Community College	1,600	Stolen Media Drive
an individual visiting the Skills to Employment office took a mobile data storage device from a workforce counselor's office that contained names and Social Security numbers.
6/7/2009	CS Stars LLC, Constitution State Services LLC, Travelers Indemnity Company	"Unknown"	Stolen Hard Drive
An unencrypted, portable hard drive stolen from a CS Start's employee contained client names, addresses and Social Security numbers of claimants from Constitution State Services LLC and Travelers Indemnity Company who were provided workers compensation-related insurance benefits.
6/7/2009	Ohio State University	350	Dishonest Insider
An e-mail accidentally included an attachment that listed students' names and Social Security numbers.
6/5/2009	LPL Financial	"Unknown"	Stolen Computer
Two desktop computers were stolen from the office of an LPL Financial Advisor. Personal information including name, address, financial account information, and Social Security numbers may have been breached.
6/5/2009	Virginia Commonwealth University	17,214	Stolen Computer
Names and Social Security numbers of current and former students may have been exposed when a desktop computer was stolen from a secured area.
6/4/2009	City of Duncan Oklahoma	170	Hacking
A hacker gained access into a city utility account file that not only put city funds at risk, but also banking information on about 170 utility customers.
6/3/2009	Sony Corporation of America	5,000	Dishonest Insider
Unauthorized copies of customers' credit cards, showing names and expiration dates, were emailed to an external address. The breach affected customers who signed up for the Sony Rewards program.
6/2/2009	Virginia Department of Health Professions	531,400	Hacking
Social Security numbers may have been accessed after a hacker breached the state's prescription monitoring program and demanded a $10 million ransom.
6/2/2009	Batteries.com	"Unknown"	Hacking
Hackers gained access to the on-line retailer's server for several weeks and stole names, addresses and credit card information.
6/1/2009	Aviva USA	550	Virus
Customers' Social Security numbers and names and/or addresses may have been acquired after malware infected one of their computers.
5/27/2009	Aetna Inc.	65,000	Hacked
Social Security numbers of current and former employees and people who received job offers from the company were stored on the a Web site that was breached by intruders who successfully harvested e-mail addresses from the same Web site.
5/27/2009	Warren County Virtual Community School	140	Improper Disposal
A list was found in a dumpster that listed more than 140 students’ names, addresses, Social Security numbers and birth dates.
5/19/2009	National Archives and Records Administration	100,000	Missing Hard Drive
A computer hard drive went missing that contained massive amounts of sensitive data from the Clinton administration, including Social Security numbers, addresses, and Secret Service and White House operating procedures.
5/18/2009	Anderson Kia of Boulder	"Unknown"	Improper Disposal
Recycling bins allocated for auction were stuffed with former customer file folders. The folders included Social Security numbers, driver’s license information, photos, phone numbers and financial information.
5/13/2009	United Food and Commercial Workers Union	47,000	Lost Laptop
A union employee's laptop was stolen on the East Coast that may have contained names, address, dates of birth, and Social Security numbers of Oregon's Local 555 members.
5/12/2009	CompuCredit	120	Web Exposure
A computer processing error made 120 customer credit card statements into a single PDF, instead of 120 separate images, which allowed users to see statements including name, Social Security number, birth date, and credit card information of other customers.
5/12/2009	Washington D.C. Office of the State Superintendent of Education	2,400	Inadvertent Exposure
An employee of the agency's Higher Education Financial Services Program inadvertently attached an Excel spreadsheet to an e-mail. The information included student names, e-mail and home addresses, phone number, Social Security numbers, and dates of birth.
5/8/2009	University of California Berkeley	160,000	Hacking
Hackers accessed the health services center databases compromising Social Security numbers, birth dates, health insurance information and some medical records. Access was discovered when hackers left "taunting messages" to system administrators.
5/5/2009	East Burke Christian Ministries	1,000	Improper Disposal
A thief broke into the offices of East Burke Christian Ministries and stole a computer containing more than 1,000 Social Security numbers of clients.
5/4/2009	Fulton County Board of Registration and Elections	100,000	Improper Disposal
Thirty boxes were found in a trash bin at Atlanta Technical College that contained cards and documents of personal information on active voters, including full names, addresses and Social Security numbers.
5/4/2009	Kapiolani Community College	15,487	Virus
A computer that was infected by malware did not have sensitive information, but it was hooked up to a network that had access to names, addresses, phone numbers dates of birth and Social Security numbers.
5/4/2009	Virginia Dept of Health Professionals	4,400	Lost Storage Device
A worker’s failure to abide by security precautions caused a portable data-storage device containing employee names, home addresses and phone numbers, Social Security numbers and birth dates to disappear.
5/1/2009	LexisNexis / Investigative Professional	32,000	Suspected Fraud
Information that may have been improperly accessed in a credit card fraud scheme includes names, birth dates and Social Security numbers.
4/30/2009	Oklahoma Housing Finance Agency	225,000	Stolen Laptop
The names, Social Security numbers, tax identification numbers, birth dates and addresses of clients of the Section 8 Housing Voucher Program were on an employee’s laptop that was stolen.
4/29/2009	Illinois Department on Aging	170	Web Exposure
A spreadsheet with worker names and Social Security numbers was found on the Internet. It was accidentally released to a so-called peer-to-peer network during a music transfer to an agency laptop.
4/29/2009	West Virginia State Bar	"Unknown"	Hacking
The Bar discovered the security breach while its Web site was being upgraded and says all personal information on its network is potentially compromised. Information includes members' names, mail and e-mail addresses, lawyer identification numbers, and the Social Security numbers of some members and former members.
4/24/2009	Warrior Xpress /Celadon Trucking	1,000,000	Improper Disposal
Thousands of personnel documents found in dumpster contained names, medical records, tax forms, checks and copies of credit cards.
4/23/2009	Oklahoma Department of Human Services	1,000,000	Stolen Laptop
A computer was stolen from an employee that contained the names, Social Security numbers, birth dates and home addresses of Oklahoma's Human Services' clients receiving benefits from programs such as Medicaid, child care assistance, nutrition aid and disability benefits.
4/22/2009	Marian Medical Center	3,200	Stolen Media Device
Patient names, Social Security numbers, dates of birth and medical histories was on a Blackberry portable device that was stolen from an employee's office.
4/20/2009	FairPoint Communications Inc.	4,400	Lost Storage Device
A worker’s failure to abide by security precautions caused a portable data-storage device containing employee names, home addresses and phone numbers, Social Security numbers and birth dates to disappear.
4/13/2009	Moses Cone Hospital/VHA Inc.	14,380	Stolen Laptop
A laptop computer containing patient information, and in some cases Social Security numbers, was stolen from a vendor, VHA Inc., who works with Moses Cone and hospitals across the country to improve quality, increase efficiency and save costs on supplies.
4/11/2009	Johns Hopkins Hospital	46	Dishonest Employee
An employee who had access to key patient information such as names, addresses, parents' names and Social Security numbers, may have been part of a scheme to make fraudulent Virginia driver's licenses.
4/11/2009	Peninsula Orthopaedic Associates	100,000	Stolen Tapes
Tapes containing patient information, including their Social Security numbers, employers and health insurance plan numbers, were stolen while in transit to an off-site storage facility.
4/10/2009	Oklahoma Employment Security Commission	5,534	Lost Hard Drive
An employee lost a flash drive containing the Social Security numbers and payroll information of Shawnee-area workers.
4/10/2009	Borrego Springs Bank/Vavrinek, Trine, Day and Co.	"Undisclosed"	Stolen Laptops
The theft of seven laptop computers from an auditing firm exposed sensitive personal financial information including account name, number and balance.
4/10/2009	Penn State Erie, The Behrend College	10,868	Hacking
Malicious software may have compromised historical data on a computer containing 10,868 Social Security numbers.
4/9/2009	Fox Entertainment Group, MySpace.com	"Unknown"	Dishonest Employee
An employee working in the company's benefits department of MySpace collected Social Security numbers and compensation records of co-workers in order to “annoy selected individuals.”
4/9/2009	iNET Interactive	318	Hacking
A hacker accessed an old payment system containing 9,561 credit card numbers with CCV codes in which 1,900 have been identified as expired credit card numbers.
4/9/2009	Gexa Energy	"Unknown"	Hacking
A hacker breached customer data that may have included name, date of birth, driver's license number, and Social Security number.
4/9/2009	Northeast Rehabilitation Hospital	"Unknown"	Stolen Laptop
A laptop computer case was stolen from a therapist's parked car at a local school exposing names, addresses, dates of birth and Social Security numbers.
4/9/2009	North Carolina Department of Motor Vehicles	13	"Unknown"
Personal information was breached and includes names, addresses, telephone numbers, dates of birth, driver license numbers, Social Security numbers and possible medical information
4/8/2009	Metropolitan Nashville Public Schools	18,000+	Web Exposure
More than 18,000 Metro Nashville students' names, Social Security numbers, addresses and dates of birth were exposed by a private contractor, Public Consulting Group, who unintentionally put student data on a computer Web server.
4/8/2009	Hawaii Department of Transportation	1,892	Stolen Laptop
A laptop with the names, addresses, Social Security numbers and other personal information of 1,892 commercial vehicle license drivers was stolen from a fifth-floor state office.
4/7/2009	Richmond Dermatology Specialists, PC	"Hundreds"	Improper Disposal
Hundreds of files with Social security numbers, addresses, phone numbers, and patient symptoms were found scattered along a street.
4/3/2009	Fujitsu Consulting Inc.	3,410	Lost in Shipment
A package containing a storage device with personal information, including names and Social Security numbers belonging to The Travelers Insurance, was lost in transit from Fujitsu offices in New York City to Montreal by an overnight courier.
4/3/2009	Town of Culpeper	7,845	Web Exposure
Files containing the names, addresses and Social Security numbers of town taxpayers were on the Internet due to a vendor's mistake.
4/3/2009	Tennessee Department of Human Services / Policy Studies, Inc.	1,600	Dishonest Employee
A child support worker of Policy Studies, Inc., a private company that provides child support services for Davidson County, had access and stole private identifying information, including names, Social Security numbers and bank account number, to sell for profit.
4/1/2009	State of Maryland	8,000	Lost in Shipment
The names, Social Security numbers and other personal information of about 8,000 state employees were lost when a torn and empty envelope from the company that manages the state's health savings account program arrived by US mail.
4/1/2009	University of Washington	6,000	Hacking
Two University of Washington parking-management computer servers were hacked that contained employee names and Social Security numbers.
3/31/2009	Palo Alto Medical Foundation	1,000	Stolen Laptop
Thieves broke into the offices of Palo Alto Medical Foundation in Santa Cruz and stole a laptop containing EMG results, the patients' medical record numbers, treatment plans and diagnoses.
3/27/2009	Massachusetts General Hospital	208	LStolen Laptop
An employee of Massachusetts General Hospital left confidential information on an MBTA train that listed their names and dates of birth, and private medical information, including their diagnoses and the name of the provider with whom they met.
3/24/2009	Massachusetts General Hospital	66	Lost Document
An employee of Massachusetts General Hospital left confidential information on an MBTA train that listed their names and dates of birth, and private medical information, including their diagnoses and the name of the provider with whom they met.
3/21/2009	Solano Community College	"Unknown"	Improper Disposal
A report containing the names, addresses, and Social Security numbers of the 2008 graduating class accidentally ended up as scrap paper in a mathematics labs.
3/19/2009	Metropolitan Nashville Public Schools	21	Improper Disposal
Confidential paperwork that lists Metro school students' names, Social Security numbers and disabilities were found on the side of the road.
3/18/2009	New York City Housing Authority	"Unknown"	Improper Disposal
Dozens of confidential files with city public housing residents' birth dates, Social Security numbers, and eviction notices were dumped on an East New York street.
3/18/2009	University of West Georgia	1,300	Stolen Laptop
Personal information, including names, addresses, phone numbers and Social Security numbers, of nearly 1,300 students and faculty members was on a laptop stolen from a professor traveling in Italy.
3/18/2009	Penn State Office of Physical Plant	1,000	Virus
The Office of Physical Plan, responsible for the overall care of the physical assets of Penn State, encountered a virus that was downloaded to an administrative computer and possibly exposed more than 1,000 employees from 2000 whose names and Social Security numbers were listed.
3/18/2009	Central Ohio Transit Authority	900	Inadvertent Exposure
COTA personnel workers gave their names and Social Security numbers to 51 companies proposing to bid on providing long-term disability insurance to COTA.
3/16/2009	University of Toledo	450	Stolen Laptop
A stolen computer contained personal information about 24,000 students and 450 faculty during the 2007-08 and 2008-09 academic years. The student data included identification numbers and grade point averages, but the faculty information included names, Social Security numbers, birth dates, and more.
3/12/2009	DeZonia Group, Inc., City of Chicago	"Unknown"	Stolen Laptop
A laptop containing patient names, addresses and Social Security numbers was stolen from an employee of DeZonia Group, a company outsourced by the city to process ambulance billing.
3/11/2009	Pentel of America Ltd	2,076	Hacking
Pentel's web maintainer and server host reported a hacker gained unauthorized access to the online store database and accessed customer names, addresses, phone numbers, and credit card numbers with expiration date and CV2 credit card security code.
3/10/2009	Sonoma County Sheriff	1,000	Stolen Laptop
Thieves broke into Santa Rosa police cars at the city's Municipal Services Center and stole four laptop computers with access to the county data system. Names, home addresses and Social Security numbers were said to be in the database.
3/6/2009	New York City Office of Payroll Administration/ The Organization of Staff Analysts	3,470	Lost Document
A document containing names and Social Security numbers of 3,470 city employees represented by the Organization of Staff Analyst was sent by certified mail with return receipt requested. The document never arrived and the return receipt was signed with a name no one recognized.
3/6/2009	Idaho National Laboratory	59,000	Lost in Shipment
Names, dates of birth, Social Security numbers, and badge numbers of current and former employees going back to 1949 were on a CD lost in shipment.
3/5/2009	Federal Emergency Management Agency	50	Stolen Laptop
Names, Social Security numbers, dates of birth, addresses and phone numbers of people who applied for flood assistance with FEMA were on a laptop stolen from a housing inspector.
3/5/2009	New York City Police Department	80,000	Stolen Tape
An NYPD pension telecommunications director, allegedly bypassed the back office’s layered security and stole backup tapes that contained addresses, Social Security numbers, medical records, and direct-deposit information on nearly 80,000 current and retired police officers.
3/4/2009	St. Rita's Medical Center	242	Stolen Document
Thieves broke into an employee's vehicle and stole information on patients, including names, dates of birth, addresses, phone numbers, patient identification numbers, names of case managers and physician, and Social Security numbers.
3/4/2009	Elk Grove Unified School District, CA	520	Lost Document
A document with the Social Security numbers of more than 500 Elk Grove Unified School District employees was lost by a district employee.
3/3/2009	Western Oklahoma State College	1,500	Hacking
Unauthorized access potentially exposed the names, Social Security numbers and other personal information on 1,500 campus library users going back to 2004.
3/1/2009	City of Muskogee, OK	4,500	Unknown
City officials discovered a possible breach of utility billing information on accounts that were closed prior to August 2000. The disk contained Social Security numbers for some of the account holders.
2/27/2009	North Star Realty	"Unknown"	Improper Disposal
Personal information of hundreds found in dumpster, including Social Security numbers, mortgage papers, addresses, and other data.
2/25/2009	Steamboat Springs School District	1,300	Stolen Laptop
Client files of a local mortgage broker were discovered in trash bins. Information included bank account statements, completed tax forms, credit reports, and Social Security numbers, among other information.
2/23/2009	Seaview Financial, Corona Del Mar, CA	"Unknown"	Improper Disposal
Client files of a local mortgage broker were discovered in trash bins. Information included bank account statements, completed tax forms, credit reports, and Social Security numbers, among other information.
2/20/2009	Arkansas Department of Information Systems/Information Vaulting Services	807,000	Lost Backup Tape
A computer storage tape with data from criminal background checks dating back to the mid-1990s went missing. The background-check information includes names, dates of birth, Social Security numbers and addresses.
2/20/2009	Del Mar College	53	Stolen Information
The names and Social Security numbers of 53 Del Mar College students were printed on a class roster stolen from an instructor's vehicle.
2/19/2009	California Pizza Kitchen	50	Dishonest Employee
An employee admitted skimming customers' credit card numbers that was then given to another person who made fake credit cards.
2/19/2009	Scottsdale Healthcare, Chandler Regional Medical Center	15	Dishonest Employee
A hospital worker targeted elderly, female patients in a series of credit card thefts.
2/19/2009	University of Florida	97,200	Hacker
A hacker accessed the school's computer system, which contained personal information, including Social Security numbers, for about 97,200 students, faculty and staff members who used the system between 1996 and 2009.
2/18/2009	Rio Grande Food Project	36,000	Stolen Laptop
A laptop computer containing addresses, birth dates and Social Security numbers was stolen.
2/18/2009	Johns Hopkins Hospital	"Unknown"	Dishonest Employee
A hospital employee stole patients' credit to obtain credit cards, goods, and loans.
2/18/2009	People's Bank	"Hundreds"	Improper Disposal
Hundreds of documents were found in a bank dumpster that included bank account details and Social Security numbers.
2/14/2009	University of Alabama	37,000	Hacking
A hacker gained access to 17 computer servers which had a database containing the names, addresses, birthdates and Social Security numbers of each person who had lab work done on the campus since 1994.
2/13/2009	Clayton County Sheriff's Department	"Unknown"	Dishonest Employee
A department employee is suspected of stealing and distributing personal data of deputies including Social Security numbers, driver's license numbers, dates of birth, telephone numbers and employee identification numbers.
2/11/2009	Hegarty Chiropractic - Rancho Cordova, CA	200	Improper Disposal
Hundreds of files with medical records, Social Security numbers, driver’s license numbers, and other personal information were found in a dumpster.
2/10/2009	SemGroup LP, OK	160	Web Exposure
Online banking bandits pulled thousands of dollars from the accounts when bankruptcy court documents with employee financial details were made public.
2/9/2009	United States Post Office	"Unknown"	Dishonest Employee
A mail carrier in San Diego County is accused of stealing dozens of gift cards, debit cards and Social Security documents sent through the mail.
2/9/2009	Anti-Gym	"Unknown"	Improper Disposal
Personal information, including credit card numbers, was found in an outside dumpster after the IRS shut down the gym for non-payment of payroll taxes.
2/9/2009	Parkland Health & Hospital System	9,300	Stolen Laptop
A stolen laptop computer may have contained the names, birth dates and Social Security numbers of 9,300 employees of Parkland Memorial Hospital.
2/9/2009	Nationwide Children’s Hospital	23	Hacking
Records were stolen from a doctor's vehicle that included medical information and Social Security numbers.
2/9/2009	Federal Aviation Administration	43,000	Hacking
Hackers broke into the Federal Aviation Administration's computer system, accessing the names and Social Security numbers of 45,000 employees and retirees.
2/7/2009	Kaiser Permanente	29,500	Dishonest Insider
A file of information including employee names, Social Security numbers and birthdates were found in the possession of a criminal who did not work at Kaiser.
2/7/2009	Best Buy	4,000	Dishonest Employee
A cashier used a card reader to copy the numbers and sold them for $17 per card to the mastermind of the scheme, who then sold them to third parties for hundreds of dollars.
2/6/2009	Motorola	"Unknown"	Hacking
Motorola's Software Technology Center website experienced a security vulnerability that may have allowed unauthorized parties to access personal information, including names, contact information, payment card numbers, and payment card expiration dates.
2/6/2009	East Moon Asian Bistro	200	Dishonest Employee
The owner agreed to three people working only for tips and did not get personal information on them. The employees, who worked for only three weeks, skimmed credit cards
2/6/2009	Catskill Regional Medical Center	431	Dishonest Employee
An audit discovered an employee was spying into files that contained extensive information on patients, including Social Security numbers, birth dates, addresses and financial information.
2/6/2009	Purdue University	1,210	Inadvertent Exposure
A mailing error resulted in 1099 tax forms being sent to the wrong recipients, compromising social security numbers and other details. The forms printed two per page and they were not separated prior to being mailed.
2/4/2009	SRA International	"Unknown"	Hacking
SRA International’s computer network was infected by a virus, which may have allowed hackers to access some federal employees’ personal information including names, addresses, dates of birth, health information and Social Security numbers.
2/4/2009	Mooresville's Dry Cleaning Station	"Unknown"	Dishonest Insider
The owner cleared out her dry cleaning shop and took her client's clothes and credit card numbers. She is using her old customers' credit card numbers fraudulently.
2/3/2009	Georgia State Board of Pardons and Paroles	"Unknown"	Stolen Computer
A computer was stolen from a state contractor's office during a burglary. Information on the computer contained names, dates of birth and Social Security numbers of current and past parolees supervised by the State Board of Pardons and Paroles since 1998.
2/2/2009	Irving Independent School District	50	Unknown
Detailed information such as Social Security numbers and birth dates of employees and volunteers were in the possession of a women trying to buy merchandise at Sears after opening a line of credit.
2/2/2009	United Way, FL	"Unknown"	Hacking
A hacker gained access to United Way's computer system and deleted files and applications. It has not been determined if the hacker was able to view credit card information in those files.
2/2/2009	Southern Satellite, FL	"Unknown"	Improper Disposal
Hundreds of folders containing names, addresses, Social Security numbers and credit card information were found in a dumpster.
2/1/2009	St. Anthony Central Hospital	150	Dishonest Insider
A hospital employee stole patient records containing dates of birth, Social Security numbers and driver's licenses of 150 patients who had been admitted into the emergency room or general surgery and passed them on. This information was found in an auctioned storage unit.
1/30/2009	Department of Human Services Coos Bay	45	Web Exposure
Students enrolled in an agricultural economics class in 2001 inadvertently had personal information exposed on the Internet through a departmental Web site. Names, Social Security numbers and grades of those students have been exposed since 2001.
1/30/2009	Kansas State University Manhattan	45	Web Exposure
Students enrolled in an agricultural economics class in 2001 inadvertently had personal information exposed on the Internet through a departmental Web site. Names, Social Security numbers and grades of those students have been exposed since 2001.
1/30/2009	Indiana Department of Administration	8,775	Web Exposure
Social Security numbers of current and former state employees were accidentally posted on a state Web site for about two hours. The Social Security numbers were included in a contract solicitation file posted on the department's procurement Web site.
1/29/2009	Educational Testing Service ("ETS")	"Unknown"	Lost Laptop
A laptop went missing from the desk of an employee at the offices of ETS that contained personal information, including names and Social Security numbers.
1/29/2009	The Stanley Works	"Unknown"	Stolen Laptop
A stolen laptop from a United States airport contained employee information of The Stanley Works and its subsidiaries, including their names, Social Security numbers, and some salary detail.
1/28/2009	CityStage	60	Hacking
Hackers accessed credit card information affecting customers who purchased gift cards.
1/27/2009	City of Beaumont, TX	500	Web Exposure
Personal information, including birth dates and Social Security numbers, of about 500 current and former Beaumont city workers accidentally was posted online as Beaumont sought proposals for a third-party administrator for worker compensation claims.
1/26/2009	Pflugerville ISD	"Unknown"	Hacking
Two students hacked into Pflugerville ISD school computers and got access to sensitive information, including security passwords, alarm codes, personal staff information as well as tests.
1/26/2009	Madison City Hall	300-500	Stolen Laptop
A city laptop was taken from the Human Resources Department offices that contained Madison officials and employees' photo, name and Social Security numbers.
1/21/2009	Kanawha-Charleston Health Department	11,000	Dishonest Employee
A former flu clinic billing clerk stole information on flu-shot recipients, which included their names, social security numbers, addresses and other personal information.
1/21/2009	Heartland Payment Systems	"100 Million"	Hacking
The credit card processor that mostly supports small and midsize businesses discovered an intrusion that uncovered malicious software that compromised data across Heartland's network.
1/16/2009	Southwestern Oregon Community College	200	Stolen Laptop
A computer that contained student records for approximately 200 current and former students was stolen from the campus.
1/15/2009	Express EMS Services	"Unknown"	Improper Disposal
Dozens of documents with sensitive personal information, such as Social Security numbers and Medicare numbers were found in a dumpster.
1/13/2009	Blue Ridge Community Action	300	Lost External Hard Drive
An external computer hard drive was lost by an employee. It contained approximately 300 Social Security numbers of clients who have used the organization's services in the past four or five years.
1/13/2009	Occidental Petroleum Corporation	"Unknown"	Dishonest Employee
A former employee “accessed and mishandled” personal information by emailing a spreadsheet containing information on former employees to a personal email account. The former employees’ data included names, addresses, birthdates, employee identification numbers, starting dates, retirement dates, and Social Security numbers.
1/13/2009	University of Oregon Youth Transition Program	2,000	Stolen Laptop
A laptop computer containing names and Social Security numbers of Youth Transition Program (YTP) participants was stolen from a University of Oregon employee.
1/12/2009	Continental Airlines	230	Stolen Laptop
A laptop stolen from the offices of Continental Airlines contained fingerprints, Social Security numbers, names, addresses, etc.
1/12/2009	Columbus City Schools	100	Hacking
A computer printout listing 80 to 100 Social Security numbers of Columbus school employees was found in a home during a police raid. The two suspects had opened credit cards and checking accounts with the personal numbers.
1/11/2009	University of Rochester	450	Hacking
Names and Social Security numbers students and former students were accessed and copied illegally to an off-campus IP address from a non-academic student database.
1/9/2009	Seventh-Day Adventist Church	"Unknown"	Stolen Laptop
A laptop computer assigned to an employee of the North American Division of Seventh-day Adventists Retirement Plan was stolen. Information included names and Social Security numbers.
1/6/2009	CheckFree Corp.	5,000,000	Hacking
CheckFree Corp. and some of the banks that use its electronic bill payment service are notifying more than 5 million customers that criminals took control of several of the company’s Internet domains and redirected customer traffic to a malicious Web site hosted in the Ukraine.
1/6/2009	Occidental Petroleum Corporation	"Unknown"	Dishonest Employee
A former employee emailed a spreadsheet containing names, addresses, birth dates, employee identification numbers, starting dates, retirement dates, and Social Security numbers on former employees to a personal email account.
1/5/2009	Innodata Isogen, Inc.	141	Stolen Laptop
A laptop stolen from employee's car contained names, addresses, and Social Security numbers of current and former employees.
1/2/2009	Pepsi Bottling Group (NY)	"Unknown"	Lost Storage Device
A portable data storage device containing personal information, including the names and Social Security numbers of employees in the US, is missing or stolen.
1/2/2009	Merrill Lynch (NY)	"Unknown"	Stolen Computer
A computer belonging to an employee of a third-party consulting services firm working on behalf of Merrill Lynch was stolen during a burglary. Information on the computer contained the names and Social Security numbers of current and former Financial Advisors and some applicants for employment.