| Eleven
computer disks containing personal information for more than
36,000 Ohio retirees and employees went missing. It is believed
they are still within the Post Office system. |
| A
laptop stolen during a break-in at the offices of KRM, a company
hired by the city of Fresno to manage the city's compensation
claims, contained Social Security numbers, birthdates and
addresses on city employees who filed worker's comp claims
dating back to 1973. |
| A
laptop containing name, address, phone number, email address,
Social Security number, driver's license numbers, and birth
date was stolen from an employee's vehicle. |
| A
stolen laptop belonging to Howard University contained current
and former university and hospital employees' name and Social
Security number. |
| Medical
information, Social Security numbers, and other personal information
of 803 were available online through the hospital's registration
system. |
Police
reports containing names and Social Security numbers were
discarded in a dumpster behind an Albany business.
|
A
list of employee Social Security numbers was stolen from the
vehicle of a staffer who had taken the data home.
|
| Several
computers were stolen from the city school's main office that
contained undisclosed sensitive information on students. |
| A
backup tape that was improperly handled and lost contained
Social Security numbers, names, and addresses of suppliers
and other individuals. |
| A
spreadsheet containing the names, Social Security numbers,
and dates of birth for people charged with minor offenses
in 2006 and 2007 was accessible from the Internet. |
| Student
names, addresses, and in some cases, Social Security numbers
where inadvertently available on the Internet. |
The
company's e-commerce site fell victim to a series of successful
SQL injection attacks that provided unauthorized access to
names, credit cards/debit cards numbers, expiration dates,
addresses and the CVV codes.
|
| One
of the city's identification numbers and passwords to access
a database of personally identifiable information, for law
enforcement and provision of other essential government services,
had been compromised and names, addresses, dates of birth,
driver's license numbers, and Social Security numbers may
have been viewed. |
| A
student at Riverside High School gained unauthorized access
to a GCS file server that contained confidential student information,
including students’ names, addresses, Medicaid ID numbers,
and social security numbers. |
| A
laptop computer containing individuals’ credit card
and Social Security numbers of alumni, donors and others was
stolen from a vehicle belonging to a software vendor retained
by the UND Alumni Association. |
| A
laptop was taken from the vehicle of an outside contract auditor.
Information on the laptop contained full names or first names
and Social Security numbers 535 employees. |
| Hackers
originating from outside the U.S. accessed confidential data,
including Social Security numbers, of 11,000 students, faculty
and staff. |
| A
document containing Social Security numbers, phone numbers
and addresses of 1,700 brokers was accidentally attached to
a general e-mail being sent out to the same people whose information
was exposed. |
| Ten
computers in the second-floor Human Resources Department were
stolen during a break-in. The computers contained the Social
Security numbers and other personal information of about 100
new hires. |
| Names
and Social Security numbers of its U.S. employees were on
a laptop that was stolen from an employee's vehicle. |
| Credit
card numbers, names and addresses of customers who placed
orders on their web site, hosted by Smith Micro, Inc.,was
accessed by a hacker. |
| A
94-page document belonging to The Terrell Co., an insurance
brokerage firm, was found at the home of a thief. Information
contained the names, Social Security numbers, dates of birth
and salary information of FWCS employees. |
| A
class roster containing Social Security numbers was among
some documents located on a computer server that was hacked
last week. |
| former
Sonoma State University computer science students have had
their Social Security numbers exposed to the public through
an internal department Web server. |
| An
employee fraudulently used customer information to open credit-card
accounts. Customers' Social Security numbers, driver's license
numbers, addresses and possibly financial account numbers
could have been accessed. |
| A
flash drive containing the financial information and Social
Security numbers of more than 9,000 students was reported
missing. |
| Hackers
accessed systems to obtain customer payment card information
the retailer was storing since 2004. |
|
An employee who had at one point worked at the Texas comptroller's
office illegally downloaded personal information, including
driver's license and Social Security numbers, of employees,
lottery winners and retailers to his home computer. |
|
Hackers accessed a computer containing a file with the names
and Social Security numbers of College of Engineering students.
|
|
Names and Social Security numbers of Marshall University students
were openly available on a student's personal Web page. |
|
A laptop containing the names and Social Security numbers
of graduates from the College of Business Administration was
stolen from an employee who violated university policy. |
|
A file containing personal information including names, Social
Security numbers, addresses, phone numbers, job titles, email
addresses and unlisted phone numbers of 163 teachers, bus
drivers, custodians and other staff members was uploaded to
the Web in 2003. |
| Ten
computers in the second-floor Human Resources Department were
stolen during a break-in. The computers contained the Social
Security numbers and other personal information of about 100
new hires. |
|
A student was able to access a file containing the name, Social
Security number, and date of birth of approximately 245 current
and former employees after routine work was performed on the
S drive causing access privileges to be reset to default values. |
|
A clerical error, when sharing a file containing student information,
caused the file to be shared with all Ivy Tech Indianapolis
region employees. The file contained names, addresses and
Social Security numbers of all students enrolled in spring
2008 distance education courses. |
|
A laptop stolen contained names, dates of birth, and Social
Security numbers of about 12,700 applicants to the National
Technical Institute for the Deaf and another 1,100 members
at the Rochester Institute of Technology. |
| New
MasterCard-branded credit and debit cards were reissued to
963 customers after the card company alerted the bank that
the customers’ account information was in a computer
database that might have been compromised. |
| A
glitch during a computer upgrade at the Louisiana Real Estate
Commission caused the names, addresses and Social Security
numbers of more than 13,000 licensed agents to be exposed
on the Internet. |
| A
district laptop taken from a computer technician's car included
names, addresses. Social Security numbers, and phone numbers
for 4,259 students. |
| Unauthorized
access to personal information, including credit card data,
had been illegally obtained from customers who placed orders
from May 29 to Aug. 6. The company found out about the breach
when a customer contacted them stating their credit card information
had been accessed. |
|
After a pension employee resigned, it was discovered he sent
a large email attachment to his personal email address. The
attachment contained the names, addresses and Social Security
numbers of 13,000 retired Ohio police officers. |
|
Papers with student names and Social Security numbers on them
were stolen from a parked vehicle belonging to an instructor. |
|
Information for more than 2,600 people was exposed through
a file-sharing program by an employee working from home on
a personal computer. Included were the names and Social Security
numbers of 65 employees. |
|
Paper jams in a mail-inserting machine caused 2,845 welfare
benefit renewal packets to go to the wrong Pennsylvania welfare
clients' homes, and nearly half included the Social Security
numbers of the intended recipients. |
|
An unnamed courier lost a data tape containing information
about customers' names, Social Security numbers and accounts.
Customers of Jackson State Bank, Shoshone First Bank, Sheridan
State Bank, First State Bank of Pinedale and United Bank of
Idaho were affected. |
|
A hacker successfully breached the IT defenses of the Best
Western Hotel group's online booking system and sold details
of how to access it through an underground network operated
by the Russian mafia. Information stolen included home addresses,
telephone numbers, credit card details and place of employment. |
|
Debit card PIN pads at select stores had been tampered with
between February and April. As a result, an unknown number
of account numbers and PINs were hijacked. |
|
Names and Social Security numbers of 1,160 undergraduates
were inadvertently disclosed on the school's Web site. |
| Computers
were stolen during a burglary that contained information which
can be used by identity thieves. |
|
A computer server within IFMG was hacked into exposing personal
information, including the names, addresses, birth dates,
and Social Security numbers of 92,095 applicants who submitted
credit applications to IFMG's family of special finance Web
sites. |
|
Names, Social Security numbers and even personal medical information
of more than 500 patients at Wuesthoff Medical Center were
posted on the Internet. Staff members believe their pre-registration
Web site for patients may have been hacked into. |
|
Names, dates of birth, Social Security numbers and driver's
license numbers of 9,000 current and former employees were
on laptops stolen from an office in South Carolina. |
|
A Wells Fargo access code was used to steal information from
MicroBilt, a provider of consumer information to Wells Fargo.
Information, included names, addresses, dates of birth, Social
Security numbers, driver's license numbers and, in some cases,
credit account information. |
|
A flash drive was lost or stolen from the desk of an associate
who downloaded names, birth dates, Social Security numbers,
medical diagnoses and treatments of patients with HIV, AIDS
and other medical conditions. |
|
A contractor who manages the student information database
had a flash drive lost or stolen at Copper Mountain Resort
in Summit County. Information on the drive included 15,000
Corporate Learning Division students dating back 11 years,
but only 5,286 included addresses, credit card numbers or
Social Security numbers. |
|
Sensitive personal information, including Social Security
numbers, was stolen from Countrywide databases and sold to
outside mortgage providers. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a former vendor that provided benefits administration
services between Jan 1, 2004 and Mar 31, 2006, contained the
names, addresses, dates of birth, and Social Security numbers
of employees and covered dependents. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a vendor providing benefits administration services,
contained the names, addresses, dates of birth, and Social
Security numbers of employees and covered dependents. |
|
The former assistant human resources manager stole the identities
of at least 10 employees at the plant to obtain loans. |
|
Phase3, a business unit of SunGard Data Systems, Inc., lost
a laptop with data belonging to Newedge USA when an employee
left it in a taxi. Personal information may have included
name, address, date of birth, Social Security number, telephone
number, net worth, annual income, and Newedge account number.
More individuals may be affected. |
|
Names, addresses, Social Security numbers, and account numbers
of 89 current and former clients were on a laptop stolen from
an employee's vehicle. |
|
A laptop with unencrypted personal information was stolen
from an employee's vehicle. Information included names, addresses,
Social Security numbers, and driver's license number. |
|
A laptop stolen from an Art Institute of Washington employee
contained names and Social Security numbers of current and
former employees. |
|
A backup media disk containing litigation records on individuals
involved in either a lawsuit or workman's compensation claim
with Fischbach was lost during shipment. Information contained
Social Security numbers, dates of birth, work histories, medical
records and mother's maiden name. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a former benefits plan administrator, contained
the names, addresses, dates of birth, and Social Security
numbers of employees and covered dependents. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a former benefits plan administrator, contained
the names, addresses, and Social Security numbers and medical
information of employees and covered dependents. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a vendor that previously provided benefits administration
from Jan 1, 1997 to Mar 31, 2008, contained the names, addresses,
birth dates, Social Security numbers and medical information
of current and former employees, and covered dependants. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a vendor providing benefits administration, contained
the names, addresses, birth dates, Social Security numbers
of current and former employees, and possible dependants. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a former benefits administrator, contained the names,
addresses, birth dates and Social Security numbers of Nielsen
employees. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a former third-party enrollment administrator for
the WGES Welfare Benefits Plan, contained the names, addresses,
birth dates and Social Security numbers of plan participants. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a vendor who formerly provided services to Bankers
Benefits between April 2003 to December 2006, contained the
names, addresses, birth dates and Social Security numbers
of employees and their dependents. |
|
A laptop computer stolen during a burglary at an LPL office
contained unencrypted names, Social Security numbers, and
account statements of customers and non customer beneficiaries. |
|
A laptop stolen from a restaurant included the names and Social
Security numbers collected from pre-employment applications
and screenings. |
|
A computer network attack at the University of Texas at Dallas
may have exposed Social Security numbers along with names,
addresses, email addresses, and telephone numbers. |
|
University of Oakland reported that an external hard drive
had been stolen, but did not specify how the theft occurred
or how many individuals had data on the drive, if Social Security
numbers were encrypted, and whether the files pertained to
students, employees, or both. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a vendor who provided benefit plan administration
services during the time period of 01-Oct-97 to 31-Dec-06,
contained names and Social Security numbers of current and
former employees, and their dependents. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a vendor who administered a portion of Pillsbury's
benefit plan from 1998 - 2002, contained the name, address,
birth date and Social Security number of employees and their
dependents. |
|
third party benefits administrator, Willis North America,
misplaced backup tapes while in transit to a storage facility.
The backup tapes contained names, addresses, Social Security
numbers, and bank account details of TANA employees and their
dependents who have insurance provided through TANA. |
|
Personal information including name, address, date of birth,
and Social Security numbers of employees and retirees were
on a computer stolen from a Stanadyne employee's automobile. |
|
A laptop and 100-150 timecards were stolen from an employee's
vehicle compromising Social Security numbers, dates of birth,
and home addresses of 6,670 current RHD employees. |
|
A computer flash drive stolen from an unattended laptop contained
names, addresses, telephone numbers and Social Security numbers
for 2,600 former Dayton-area Delphi Corp. |
|
Social Security numbers of about 300 city of Yuma employees
were "unintentionally released" in an e-mail sent
to city administrative personnel. |
|
A laptop containing Social Security numbers, home addresses,
dates of birth, and marital status of current and former employees
was stolen from the company's offices. The information on
the laptop was password-protected and encrypted. |
|
Hackers broke into two servers holding data for a college
library consortium that serves Connecticut College, Wesleyan
University and Trinity College. The database includes names,
addresses and Social Security or driver's license numbers.
|
|
An accidental online posting of 492 people who spoke at Ohio
University's Centers for Osteopathic Research and Education
included names, Social Security numbers, addresses, their
speaking topics, and federal employer identification numbers.
|
|
A breach was discovered on a bookstore server provided by
the bookstore software provider. The information affects those
individuals who purchased books or supplies at the bookstore
between 2002 and 2006. |
|
The names and Social Security numbers of 259 University of
Houston students were inadvertently posted on the Internet
for more than two years when a math department lecturer placed
student grades on a university Web server. |
| An
HCC programmer's laptop was stolen from a hotel parking lot.
The programmer had been working on a payroll project for a
group of employees using their names, bank-routing numbers,
retirement information and Social Security numbers. |
| Applications
with Social Security numbers and copies of driver's license
were misplaced in a recycling bin that was outside department
facilities but were are supposed to be thrown away in locked
bins that stay inside. |
| An
unauthorized person gained access to a database containing
personal information of patients such as names and addresses,
limited health information and some Social Security numbers. |
| Computer
backup tapes containing the Social Security numbers of about
19,000 Tinley Park residents and 1,400 current, former or
retired village employees were lost while being transferred
from the village hall to another site within the Chicago suburb. |
|
Case files were discarded in unlocked bins that included copies
of Social Security cards, driver's licenses, passports, bank
statements and other sensitive personal information. A KTVU
cameraman caught two individuals with pick-up trucks stopping
briefly before hauling away armloads of paper. |
| Private
payroll information, including Social Security numbers, of
employees who've used the agency in the past were found discarded
in a public dumpster. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a company that provided plan administrative services
through August 2007, contained the names, addresses, dates
of birth, Social Security numbers, base salaries, and hire
dates of Gilead employees. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a company that provided benefit plan administration
services to former Netegrity employees and their dependents
prior to the acquisition of CA in 2004, contained the names,
addresses, phone numbers, dates of birth, and Social Security
numbers of Netegrity employees and their dependents. |
| A
laptop stolen from the hotel room of an employee contained
personal information, including names, Social Security numbers,
encoded information regarding background checks, and addresses
of certain current, former, and prospective U.S. employees.
|
| An
employee, who had authorized access to personal financial
information of Huron's current and former employees, had downloaded
a full set of employee W-2 forms in a text file on to her
laptop. The personal information on the laptop included Social
Security numbers as well as banking information used to make
direct payroll deposits to employee accounts. |
| A
stolen backup computer server contained telephone numbers,
addresses, next-of-kin information, dates of birth, Social
Security numbers and some medical information, including diagnoses
for the home's residents. |
| Mailing
labels on brochures sent to enrolling students about parking
information contained their Social Security number as well. |
|
A backup tape was stolen while being transported for storage.
Information contained former BMS employees' name, address,
date of birth, Social Security number, marital status, gender,
salary, hire date, termination date, retirement date, and
in some instances bank account information. |
|
A backup tape of patient information was stolen from the vehicle
of an employee who was taking the tape to an off-site storage
facility. Stolen information included patients' name, address,
Social Security number, employer, insurance company, policy
numbers and family members. |
|
Personal information of as many as 2,000 soldiers was breached,
but the Guard would not release how the personal information
had been taken. |
|
Social Security numbers of past and present employees were
posted on its Web site last month with a solicitation to companies
for workers' compensation and risk management services. |
|
More than 60 files were posted by at least four separate professors
on University servers exposing student and faculty names,
addresses, 66 Social Security numbers, 459 partial Social
Security numbers, phone numbers, e-mails, scores, GPA, GRE
Scores, Majors, Race, Gender, GPA, phone numbers, and tax
information. |
|
A laptop computer was stolen from the front seat of an Army
employee’s unlocked truck that contained undisclosed
personal information on about 800 to 900 Fort Lewis soldiers. |
|
Social Security numbers and other personal information of
5,000 school children were posted on the Internet when an
employee uploaded the information to use for a college project
without authorization. |
|
An employee using a company computer to access a file-sharing
network exposed private files, including names, dates of birth
and Social Security numbers, to the public. |
|
A potential security flaw in the state’s Organ and Tissue
Registry may have allowed unauthorized users to view names,
addresses, Social Security numbers, dates of birth, and driver’s
license numbers. |
|
A stolen laptop contained names, Social Security numbers,
home addresses, and/or dates of birth of some present and
former USF employees, and in a few instances, their dependents
and applicants for jobs at USF. |
|
Debit card data was electronically captured by individuals
who may have used it in a counterfeit scheme. The ongoing
FBI investigation revealed hackers gained access to the computer
files of a company that has not yet been revealed. Arrests
have been made. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, Inc., a vendor providing benefits administration
to current and former Googlers who were with Google before
December 31, 2005, contained personal information for employees
and their dependents including names, Social Security numbers,
birthdates, addresses, hire dates, and relationships. |
|
A contracted vendor released the names, addresses, Social
Security numbers and birth dates on about 380 potential jurors
to an employee's private e-mail address. |
|
A breach originating from the Republic of Slovenia accessed
nine computers in the College of Natural and Social Sciences.
Of the nine computers involved, five contained names and partial
or complete Social Security numbers. |
|
An admissions clerk accessed personal information, such as
name, address, date of birth, Social Security number, and
reason for coming to Baptist Health, to obtain Wal-Mart “account
authorization numbers” credit cards, used to buy Wal-Mart
gift cards. |
|
Envision Credit Union is part of the massive FBI cross country
credit card theft investigation. The files accessed contained
information on 612 current cardholders going back six or seven
years. The ongoing FBI investigation revealed hackers gained
access to the computer files of a company that has not yet
been revealed. Arrests have been made. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, Inc., a vendor who provided certain benefits administration
services between October 1996 and December 2005, contained
employees' name, address, Social Security number, and birth
date as well as those of their dependents enrolled. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, Inc., a vendor who administered services to bebe
until May 2007, contained employee, associate and dependent
names, addresses, birth dates, and Social Security numbers. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, Inc., a vendor that administers benefit plans, contained
employee and retiree names, birth dates, Social Security numbers
and other employment information. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, Inc., a vendor who provided insurance benefit administration
services to Avant! prior to their acquisition by Synopsis,
contained the names, addresses, and Social Security numbers
of former Avant! employees and their dependents. |
|
Stolen computers during a burglary at Colt Express Outsourcing
Services, a vendor that previously provided administration
services, contained on the computers included employees and
their dependents' name, address, and Social Security number. |
|
A computer found to be infected with several viruses and malware
could have been used to record and steal information on the
computer. One file on the affected computer contained a spreadsheet
with names and Social Security numbers of a large number students
and alumni. |
|
Hackers in December extracted the stolen information from
an online database that held credit card account information.
Direct Marketing Services, who owns Wards.com, failed to notify
customers. |
|
Names, home addresses, dates of birth, driver's license and
Social Security numbers were stolen from a lockbox in the
home office of an employee of L-1 Identity Solutions, a private
company contracted by the Department of Public Safety to do
fingerprinting. |
|
Names, addresses, phone numbers, Social Security numbers,
and email addresses of 128 nursing program graduates from
2006 and 2007 may have been on a flash drive that went missing. |
|
Employees, contractors and board members had their name, salary,
and Social Security number compromised when a Word document
was improperly transmitted electronically outside of the department. |
|
Bank Atlantic confirms they had a data loss, involving their
MasterCard debit cards. It happened through a local merchant,
but at this time, isn't saying which one. |
|
Burglars broke into the offices of Colt Express Outsourcing
Services, who administers the Internet publisher's benefit
plans, and stole computers containing names, birth dates,
Social Security numbers, addresses, and employment information
of current and former employees. |
|
Investigators tracked an IP address to the home of a former
employee when he tried to log on without authorization. Data
files with the names and Social Security numbers of about
800 Southeast students were found on the former employee's
computer. |
|
A state audit uncovered serious weaknesses in the web systems
at Arizona state's universities, which includes Arizona State
University, Northern Arizona University, and University of
Arizona. State auditors were able to access personal information,
including names and Social Security numbers of 10,000 individuals. |
|
Petroleum Wholesale, which operated Sunmart Travel Centers
and Convenience Stores in 10 states, dumped hundreds of records
in a dumpster outside its former headquarters. Information
included receipts with customers' names and full credit or
debit card numbers, including expiration dates, and returned
checks and forms containing customers' names and bank routing,
driver's license and Social Security numbers. |
Hundreds of files with people's names, Social Security numbers
and policy numbers were found in a dumpster.
|
A student employee had posted a database of students' housing
information, including Social Security numbers, on a Google-hosted
Web site.
|
|
A computer laptop went missing from the office of Dickson
County's top school official one week into his new position.
The laptop belonging to the district's new school superintendent
was loaded with the name and Social Security number of every
school employee from the 2006-2007 school year. |
|
Names, addresses and Social Security numbers of current and
former students were inadvertently made publicly accessible
online between 2003 to 2005, but remained online because of
an error until it was discovered during a recent routine audit. |
|
Billing records of 2.2 million patients at the University
of Utah Hospitals and Clinics were stolen from a vehicle after
a courier failed to immediately take them to a storage center.
The backup information tapes contained Social Security numbers
of 1.3 million people treated at the university over the last
16 years. |
|
A desktop computer containing personal information on about
7,000 students and 130 faculty and staff was stolen from an
office in the Moore School of Business. |
|
A computer stolen from a locked office at ETSU may contain
the name, birthdate, Social Security number, phone numbers,
address, salary, and other personal information of students,
staff and alumni. |
|
A stolen laptop contained the name, birthdate, Social Security
number, phone numbers, address, salary, and other personal
information of current and former Stanford employees hired
before September 28, 2007. |
Reported
Data Breach Disclosures
Missing
Disks