Home
News and Events
Partners
Company
Contact
 
 Reported Data Breaches and Disclosures
Increasing exposure of confidential personal information has elevated the need to make affected individuals aware of possible identity theft.

California state law SB 1386, called the Database Security Act, has prompted many other states to consider similar legislation. It requires companies that maintain personal information to notify the public when it has experienced a security breach. Congress is also considering several bills in which security breach notices would be mandated nationwide. This became an immediate concern when Bank of American lost tapes that contained the identity of several members of the U.S. Senate.

Contract All | Expand All

2007 REPORTED DATA BREACHES AND DISCLOSURES
DATE MADE PUBLIC NAME IDENTITIES EXPOSED TYPE OF BREACH
12/28/2007 United States Air Force 10,501 Stolen Laptop

A military laptop computer belonging to an Air Force band member went missing. The laptop contained personal information including Social Security numbers, birth dates, addresses, and telephone numbers of active and retired Air Force members.

12/28/2007 Davidson County Election Commission 337,000 Stolen Laptop

Thieves broke into the Davidson County offices and stole laptop computers that may have contained Social Security numbers and other personal information for every registered voter in the county.

12/28/2007 Minnesota Department of Commerce 219 Stolen Laptop

A laptop computer containing personal information on Minnesotans licensed by the state Commerce Department was stolen from one of its Pennsylvania vendors, Promissor Corporation.

12/21/2007 Franklin County Municipal Court (Ohio) 270 Hacking

A security lapse in the Franklin County Municipal Court Web site allowed hackers to gain access into a clerk's site to steal the name, address, age and Social Security number of over 270 victims charged with misdemeanors, some guilty of only a speeding ticket, to create false credit accounts and open bank accounts.

12/20/2007 Greenville County School District (S.C.) "Hundreds" Hacking

A malicious program in a computer used to process state insurance information enabled hackers to evade security and steal data. The thieves were able to capture current and former employees' names, home phone numbers and Social Security numbers.

12/20/2007 Dormitory Authority of the State of New York "Almost 800" Lost Computer Tapes

Five computer tapes containing Social Security numbers, phone numbers and addresses for up to 800 current and former employees of the state Dormitory Authority where lost in transit.

12/19/2007 Pennsylvania Department of Aging 21,000 Stolen Laptop

A state Department of Aging-owned laptop computer was stolen from the home of an employee. Information included names, addresses, Social Security numbers, some medical information and the services clients received.

12/17/2007 Brownsville School District "Unknown" Discarded Records

Forms with employee personal information including names, bank account numbers, and Social Security numbers were found littering the fence of a Brownsville School District warehouse.

12/14/2007 West Penn Allegheny Health System 42,000 Stolen Laptop

The names, Social Security numbers, phone numbers, addresses and patient care information of 42,000 patients were all on a laptop computer stolen from a nurse’s home.

12/14/2007 Deloitte & Touche "Undisclosed" Lost Laptop

A laptop containing the personal information of an undisclosed number of Deloitte & Touche partners, principals and other employees was stolen while in possession of a contractor responsible for scanning the accounting firm's pension fund documents. The computer contained names, Social Security numbers, birth dates, and other personnel information, such as hire and termination dates.

12/11/2007 Iowa Department of Natural Resources 7,000 Lost Thumb Drive

A contractor working for the DNR revealed that a computer jump drive went missing containing the names and Social Security numbers for 7000 people.

12/10/2007 Sutter Lakeside Hospital 45,000 Stolen Laptop

A laptop was stolen from a contractor's residence that contained approximately 45,000 former patients, employees and physicians. The contractor went against hospital policy by downloading names, addresses, phone numbers, dates of birth and Social Security numbers onto a laptop's hard drive.

12/10/2007 Cameron County "Undisclosed" Dishonest Insider

An employee, the former county auditor, released an e-mail to a newspaper reporter with a list of all county officials and employees. It reportedly contained names, Social Security numbers, and salaries. It was found when his computer was seized while investigating him for other charges.

12/6/2007 Oak Ridge National Laboratory 12,000 Hacking

Hackers may have infiltrated a non-classified database containing names, Social Security numbers and birth dates of every lab visitor between 1990 and 2004.

12/5/2007 Forrester Research "Undisclosed" Stolen Laptop

A laptop was stolen from the home of a Forrester Research employee, potentially exposing the names, addresses and Social Security numbers of an undisclosed number of current and former employees and directors who have received grants of Forrester stock options or who have participated in the research firm's Employee Stock Purchase Plan.

12/5/2007 Memorial Blood Centers 268,000 Stolen Laptop

A laptop computer holding donor information, including Social Security numbers, was stolen during early morning preparations for a blood drive.

12/4/2007 Duke University 1,400 Hacking

Social Security numbers of about 1,400 prospective law school applicants may have been compromised when a school Web site was accessed illegally.

12/4/2007 Indianapolis Power and Light 3,000 Website Exposure

Private information of IPL customers, including names, addresses and Social Security numbers, was inadvertently posted online for up to four years.

11/30/2007 Prescription Advantage, MA 150,000 Unknown Data Breach

Personal information was taken from the state of Massachusetts' Prescription Advantage insurance program by an identity thief.

11/21/2007 University of Florida 415 Website Exposure

Social Security numbers of former students that took a information systems and operations management class between 1998 and 2001 were posted on UF's Computing & Networking Services Web site.

11/17/2007 Masonic Home/Battelle & Battelle LLC 600 Stolen Laptop

A laptop belonging to Battelle & Battelle LLC, an auditing firm, was stolen from an employee's car. The laptop contained personal information on employees of up to 10 businesses. Battelle & Battelle LLC would not disclose the number of individuals affected by the theft but Masonic Home officials said 600 of its employees' information was stored in the laptop.

11/16/2007 Kansas State University 128 Website Exposure

Social Security numbers of international students in the English Language Program were inadvertently exposed on the K-State Web site for a year.

11/16/2007 A.J. Falciani Realty Company "Hundreds" Stolen Computers

Computers stolen in a burglary contained about seven years worth of data including between 500 to 1,000 names, addresses, Social Security numbers, dates of birth, telephone number, and other information on the company's clients.

11/15/2007 Roudebush VA Medical Center 12,000 Stolen Computers

Two personal computers and a laptop computer were allegedly stolen from an unsecured room at Roudebush VA Medical Center.One of the stolen computers contained the names, social security numbers and dates of service of approximately 12,000 veterans.

11/13/2007 Commerce Bancorp, PA "Unknown" Insider

A Commerce Bancorp Inc. employee gave out personal information on an unspecified number of Cherry Hill bank's customers including account numbers and Social Security numbers.

11/07/2007 Carolinas Medical Center-Northeast 28,000 Lost Laptop

A paramedic left a computer on the back bumper of an ambulance and then drove away. The laptop contains names, address, phone numbers and Social Security numbers of approximately 28,000 people who have been cared for by the Cabarrus County EMS over the last four years.

11/06/2007 Butte Community Bank "Unknown" Stolen Laptop

A laptop with customers' personal information including names, addresses, social security numbers, and bank account numbers was stolen from an employee who took the laptop out of the building against policy.

11/06/2007 Montana State University 271 Stolen Storage Device and Website Exposure

Three separate data security breaches revealed: A stolen data storage device contained the Social Security numbers of 216 students and employees who lived in on-campus housing; an independent security analyst informed university data security staff that an Excel spreadsheet with the names and Social Security numbers of 42 people was available on the MSU Web site; and while investigating the Excel spreadsheet incident, MSU data-security staff discovered another Excel spreadsheet with the Social Security numbers of 13 people affiliated with the Department of Computer Science on the university's Web site.

11/06/2007 Alabama Department of Public Health 15,000 Inadvertent Exposure

Personal information, including the names, ages and Social Security numbers of 1,554 families enrolled in the state's ALL Kids health care coverage program, was accidentally sent to the wrong families by a vendor who printed and mailed the renewal forms. A glitch in computer software was reported as the cause for mismatching people and addresses.

11/01/2007 City University of New York 20,000 Stolen Laptop

A broken laptop containing nearly 20,000 student's personal information, including Social Security numbers, was taken from the school's financial aid office.

10/30/2007 University of Nevada, Reno 16,000 Lost Flash Drive

An an administrative faculty member lost a flash drive that contained the names and Social Security numbers of 16,000 current and former students.

10/29/2007 Hartford Financial Services Group 230,000 Lost Backup Tapes

Three backup tapes that contained personal information of 230,000 customers, including 9,200 Ohioans, mainly of the company's property lines were misplaced.

10/29/2007 United States Postal Service, HI 3,000 Stolen Laptop

About 3,000 Oahu postal employees' names, Social Security numbers and other information were on a laptop computer that was stolen.

10/28/2007 Art.com "Undisclosed" Hacking

Hackers gained entry to the online website of Art.com, retailer of posters, prints and framed art, to access credit card accounts.

10/25/2007 University of Akron 1,200 Lost Microfilm Reel

Graduates of the fall 1974 class were informed that their names, previous addresses and phone numbers, along with birth dates and Social Security numbers, were on a microfilm reel that went missing.

10/24/2007 Not Your Average Joe's "Unknown" Hacking

A Massachusetts restaurant chain was targeted by an individual or individuals seeking to illegally obtain credit card data. Compromised dated included credit card numbers, expiration date and name associated with the card.

10/23/2007 Bates College 500 Website Exposure

The Bates network contained publicly accessible documents of recipients of the federal Perkins Loan that included address, date of birth, Social Security number, legal name and loan amount.

10/23/2007 Dixie State College 11,000 Hacking

An unauthorized person gained access to confidential files, including Social Security numbers, birth date information and addresses of those who graduated or worked at DSC from 1986 to 2005, and current DSC employees.

10/23/2007 West Virginia Public Employees Insurance Agency 200,000 Lost Tape Drive

A computer tape containing names, addresses, phone numbers, Social Security numbers and marital status of past and current members of three health insurance programs was lost last week while being shipped via United Parcel Service.

10/18/2007 University of Cincinnati 7,000 Stolen Flash Drive

A flash drive was taken from a U.C. Employee last month. It had the Social Security numbers and other data for more than 7,000 people.

10/17/2007 Louisiana Office of Student Financial Assistance/Iron Mountain "Unknown" Lost Information

Iron Mountain Inc., which is the State of Louisiana’s data storage contractor, has notified LOSF that it lost backup media. The lost media contains Social Security numbers for applicants and their parents; the bank account information for START account holders also was involved.

10/17/2007 Home Depot Inc. 10,000 Stolen Laptop

A laptop computer containing about 10,000 employees' personal data was stolen from a regional manager's car in Massachusetts. The laptop contained names, home addresses and Social Security numbers of certain Home Depot employees.

10/16/2007 Administaff Inc. 159,000 Stolen Laptop

A laptop computer was reported stolen that contained names, addresses and Social Security numbers for most employees.

10/15/2007 Transportation Security Administration 3,930 Stolen Laptops

Two laptop computers with detailed personal information about commercial drivers across the country who transport hazardous materials are missing and considered stolen. The laptops contained the names, addresses, birthdays, commercial driver's license numbers and, in some cases, Social Security numbers of 3,930 people.

10/13/2007 Montana State University 1,400 Hacking

A hacker remotely accessed a computer server that housed records containing credit card numbers and Social Security numbers of students who enrolled online for MSU Extended University courses during the last two years.

10/12/2007 King County Transportation Department 1,400 Stolen Laptop

Workers' names, addresses and Social Security numbers were on a password-protected laptop that was stolen from the home of a Transportation Department human-resources employee.

10/10/2007 Commerce Bank, KS 3,000 Hacking

A hacker broke into its IT system and accessed a database containing 3,000 customer records. The bank was able to shut down the security breach, but 20 customers had personal data compromised.

10/10/2007 Pembroke Schools "Nearly 400" Web Exposure

Nearly 400 employees along with school volunteers may have been affected when personal information, including birth dates and Social Security numbers, was accessible on the Internet.

10/10/2007 Wheels Inc. / Pfizer 1,800 Inadvertent Exposure

Personal information relating to 1,800 Pfizer employees was released onto the Internet over a two-week period during data transmissions. The information included names, addresses, birth dates and driver’s license numbers, but not Social Security numbers.

10/8/2007 University of Iowa 100 Stolen Laptop

A laptop computer was stolen from a former teaching assistant's home which contained class records for 184 former students. Social Security numbers were present in 100 of the records.

10/8/2007 Semtech "Undisclosed" Stolen Laptop
A laptop computer stolen from a Semtech vendor contained computerized data relating to Semtech employees.
10/8/2007 Carnegie Mellon University "Unknown" Stolen Laptops
Two laptops were stolen from the office of a computer science professor that contained student's Social Security numbers.
10/5/2007 Western Oregon University "Undisclosed" Inadvertent Exposure
A student uncovered a file containing the names, Social Security numbers, grade point averages and other sensitive information of former students on the university's public server and downloaded the information onto a disk.
10/4/2007 Division of Health Professions Licensure 450,000 Inadvertent Exposure
Names, addresses and Social Security numbers were released to 23 agencies that use the information as a marketing or promotional tool.
10/2/2007 Athens Regional Medical Center 85 Stolen Computer
A missing computer held Social Security numbers for 85 people, some health information for 545 people and the name, address and/or telephone numbers of 811 people.
10/2/2007 The Nature Conservancy 14,000 Hacking
A hacker illegally gained access to a computer of The Nature Conservancy containing personal information that included the names, home addresses, Social Security numbers and birth dates of current and former U. S.-based employees. It also included direct deposit bank account numbers for employees who were on the payroll between 2000 and 2004, as well as the Social Security numbers of those employees’ dependents.
9/28/2007 Gap, Inc. 800,000 Stolen Laptop
A vendor managing job applicant data for Gap Inc. lost a laptop containing personal information for people who applied for store positions with the company's Old Navy, Banana Republic, Gap and Outlet stores. Information included Social Security numbers.
9/24/2007 Utah Department of Workforce Services 2,000 Stolen Laptop
A laptop computer containing a spreadsheet with the the Social Security numbers and other personal information of about 2,000 people was reported stolen.
9/21/2007 ABN Amro Mortgage Group 5,000 Former Employee
Three spreadsheets containing more than 5,000 Social Security numbers and other personal details about customers of ABN Amro Mortgage Group were inadvertently leaked over an online file-sharing network by a former employee.
9/21/2007 City of Columbus 3,500 Stolen Computers
Three computers stolen from an East Side warehouse contained the names, addresses and Social Security numbers of more than 3,500 Columbus residents who have participated in a city home-repair program.
9/19/2007 University of Michigan 3,100 Stolen Backup Tapes
Backup tapes in a lock box, totaling 8,585, contained patient information such as social security numbers, names and addresses.
9/14/2007 Tennessee Tech University 3,100 Inadvertent Exposure
A technical problem in the way student bills are printed resulted in the chance that some student social security numbers and personal identification numbers may have been sent to another student's address.
9/14/2007 TD Ameritrade Holding Corp. 6.3 Million Hacking
A database containing contact, trading data and demographic information was hacked and stolen. Ameritrade said more sensitive information in the same database, including Social Security numbers and account numbers, does not appear to have been taken.
9/11/2007 TennCare / AmeriChoice Inc. 67,000 CD Lost in Shipment
A CD sent overnight by UPS in an un-encrypted form was lost. Information included names, Social Security numbers, birthdays and addresses.
9/11/2007 Gander Mountain 112,000 Lost or Stolen Computer
Credit card information for 112,000 customers of its Greensburg store was on a computer that was lost or stolen. Information also includes 10,000 records with names, card numbers and expiration dates of credit card transaction records.
9/11/2007 Pennsylvania Public Welfare Department 2,000 Stolen Computers
Two computers containing the mental health histories of more than 300,000 medical-assistance recipients were stolen from a state Public Welfare Department office. The information on the computers, protected by multiple passwords, identified people by codes and not by name, but full names and Social Security numbers of nearly 2,000 people were also on the computers.
9/10/2007 Purdue University 111 Online Exposure
A document containing names and Social Security numbers of students who were in a 2004 Animal Sciences class was on a computer server connected to the Internet.
9/7/2007 McKesson "Unknown" Stolen Computers
McKesson, which helps pharmaceutical manufacturers set up assistance programs for patients in need, reported two computers were stolen from its offices. Information included patient addresses, prescribed medications, dosages, Social Security numbers, and dates of birth.
9/6/2007 De Anza College 4,375 Stolen Laptop
An mathematics instructor's laptop computer containing students' names, addresses, grades and in many cases Social Security numbers, was stolen.
9/6/2007 University of South Carolina 1,482 Website Disclosure
An "accidental disclosure" of private student information including Social Security numbers, test scores and course grades, was discovered on the Internet
9/4/2007 Pfizer 34,000 Dishonest Insider
A Pfizer employee removed copies of confidential information from a Pfizer computer system that included employees' names, Social Security numbers, addresses, dates of birth, phone numbers, bank account numbers, credit card information, signatures and other personal information.
9/1/2007 John Hopkins Hospital 5,783 Stolen Desktop Computer
A desktop computer stolen in July included patients' names, Social Security numbers, birth dates and medical histories.
8/30/2007 AT&T "Undisclosed" Stolen Laptop
A laptop containing unencrypted personal data on current and former employees of the former AT&T Corp. was stolen recently from the car of an employee of a professional services firm doing work for the company.
8/30/2007 Maryland Department of the Environment "Undisclosed" Stolen Laptop
Four databases that included personal information related to licenses issued by four state boards was on a computer stolen from a vehicle.
8/28/2007 Connecticut Department of Revenue Services 106,000 Stolen Laptop
A computer laptop with the names and Social Security numbers of Connecticut taxpayers was stolen.
8/26/2007 American Ex-Prisoners of War 35,000 Stolen Hard Drives
Personal records including addresses and Social Security numbers of more than 35,000 veterans and their families were stolen during a break-in at a POW support organization in Texas.
8/24/2007 Loomis Chaffee School "Several Hundred" Stolen Equipment
Equipment stolen from the school's Information Technology Department contained names, Social Security numbers, and contact information of former students.
8/23/2007 Financial Information Services Agency (FISA) 280,000 Stolen Laptop
A laptop containing data on 280,000 New York City retirees was stolen from a consultant when he brought it to a Korean restaurant. The consultant was employed by CGI AMS, a Canadian information and technology services company hired by the city to evaluate the city's pension payments system.
8/22/2007 California Public Employees' Retirement System (CalPERS) 445,000 Inadvertent Exposure
All or a portion of each person's Social Security number appeared -- without hyphens -- on the address panel when the printer accidentally added the numbers to the brochures' address boxes, even though the printing system had alerts designed to detect and prevent publication of Social Security numbers.
8/21/2007 West Virginia Board of Barbers and Cosmetologists "Thousands" Stolen Records
A safe was stolen that contained personal information on every barber and cosmetologist licensed in the state of West Virginia since 1986.
8/21/2007 Walter Reed Army Institute of Research "Unknown" Discarded Records

Boxes of documents containing personal information from the Walter Reed Army Institute of Research were supposed to be shredded but instead turned up in an off-base trash bin.

8/15/2007 Utica Title and Escrow "Thousands" Discarded Records

About 200 boxes containing personal information, including Social Security numbers, bank accounts and pay stubs, were left in a storage unit by the defunct company and available for sale before being discarded in a dumpster.

8/15/2007 Sky Lakes Medical Center 30,000 Online Exposure

The company that maintained the hospital's online bill payment system, transferred patient information from one server to another to perform maintenance but didn't take security measures, leaving information such as names, addresses and Social Security numbers exposed.

8/15/2007 Idaho Army National Guard 3,400 Stolen Laptops

A portable drive containing personal information on roughly 3,400 soldiers was stolen out of a soldier's car.

8/13/2007 Pfizer Inc. / Axia Ltd. 950 Stolen Laptops

A management consulting company named Axia Ltd. notified Pfizer that two of their laptops were stolen from a locked car. Information included the names and Social Security numbers of health-care professionals.

8/11/2007 Providence Alaska Medical Center 250 Lost Laptop

A laptop computer containing the personal information of patients went missing. The laptop mat hold names, medical record numbers, dates of birth, patient diagnoses, Social Security numbers and addresses.

8/10/2007 Legacy Health System 747 Dishonest Employee

Personal data including Social Security numbers, dates of birth, credit card transaction slips and checks was stolen from the clinic between January 2006 and February 2007.

8/10/2007 Loyola University 5,800 Improperly Discarded

A computer previously used by the university's Information Technology Services department was discarded before its hard drive containing student Social Security numbers had been erased.

8/8/2007 Patton State Hospital "Nearly 300" Lost Flash Drive

A lost computer flash drive held the names and Social Security numbers of nearly 300 registry nurses at Patton State Hospital.

8/8/2007 Yale University 10,200 Stolen Computers

Two computers that included names and Social Security numbers for approximately 10,000 current and former students and about 200 current and former faculty and staff members were stolen from the Yale College Dean’s Office.

8/7/2007 Electronic Data Systems Corp. 498 Dishonest Employee

A former employee of Electronic Data Systems stole the names and identifying information of 498 Alabama Medicaid recipients and subsequently sold 50 of those identities to other individuals to be used in filing fraudulent federal tax returns.

8/7/2007 Merrill Lynch 33,000 Stolen Computer Device

A computer device was stolen from the corporate offices in New Jersey that contained sensitive personal information, including Social Security numbers, about some 33,000 employees.

8/6/2007 VeriSign "Undisclosed" Stolen Laptop

A laptop containing extensive personal information on an undisclosed number of VeriSign employees was stolen from an employee's car. The information included names, addresses, Social Security numbers, dates of birth, telephone numbers, and salary records.

8/4/2007 Kellogg Community Federal Credit Union "Undisclosed" Stolen Computer

A computer containing members' names, addresses, telephone numbers, birth dates, social security numbers and account numbers was taken from the offices of a vendor providing services to the Credit Union.

8/4/2007 Wabash Valley Correctional Facility "Undisclosed" Inadvertent Exposure

A database containing Social Security numbers, dates of birth and names of people employed at the facility between 1997 and 2002 was accessible by other employees.

8/2/2007 E.On "Undisclosed" Stolen Laptop

A laptop owned by Mountjoy & Bressler, an accounting firm, was stolen that contained the names, Social Security numbers and birth dates of most E.On U.S. employees and some retirees.

8/2/2007 University of Toledo "Undisclosed" Stolen Computers

Two hard drives stolen from the Health and Human Services Building contained the personal information of some students and staff, including names, Social Security numbers, and grade changes. (Update) An associate professor of health education, was charged in arrest warrants with receiving stolen property, tampering with evidence, unauthorized use of property, obstructing official business, and filing a false report.

7/28/2007 Yuba County Child Support Services 70,000 Stolen Laptop

A stolen laptop being used as a backup system at the Child Support Services office contained Social Security numbers, birth dates, driver’s license numbers and other private information on 70,000 people, including 30,000 children.

7/27/2007 City of Virginia Beach 2,000 Dishonest Insider

School and city employee personal information, including names and Social Security numbers, was compromised by an ex-employee of a company, Flexible Benefits Administrators, contracted to administer benefit plans.

7/27/2007 City Harvest "Unknown" Hacking

A breach into City Harvest information systems exposed credit card information of donors.

7/27/2007 CESA 300+ Hacking

Wisconsin's Office of Privacy Protection is reporting a breach involving CESA affecting 300+ individuals including current employees, past employees, terminated employees and vendors. Information includes name, address, date of birth, Social Security number, and bank routing info.

7/27/2007 American Education Services 5,184 Stolen Laptop

A laptop stolen in a burglary at Vista Financial Inc., a subcontractor headquartered in Livermore, Calif., contained non encrypted personal information including name, address, phone number, e-mail address and Social Security number of student loan customers.

7/26/2007 U.S. Marine Corps. / Penn State University 10,554 Online Exposure

Marines who had rifle range requalification records while attending Marine Corps Recruit Depot Parris Island, S.C. had their personal information, including names and Social Security numbers, inadvertently posted online.

7/24/2007 St. Vincent Hospital 51,000 Online Exposure

A security lapse compromised the names, addresses and Social Security numbers of about 51,000 patients when a subcontractor, Verus Inc., made a change to the internet server while setting up a program to allow patients to pay bills online.

7/21/2007 University of Michigan 5,500 Hacking

A hacker gained access to two School of Education databases that contained the names, addresses, some Social Security numbers and some birth dates of current and former students.

7/20/2007 SAIC 867,000 Online Exposure

SAIC transmitted online, without encryption, information about troops, family members and other government employees maintained on an unsecured server.

7/19/2007 Texas Secretary of State "Thousands" Website Exposure

Sensitive information including names, addresses and Social Security numbers was found posted to Texas Secretary of State's SOSDirect Web site.

7/19/2007 Jackson Local Schools 1,800 Website Exposure

Social Security numbers of 1,800 present and former Jackson Local Schools’ employees were at risk of public access on a county-maintained Web site.

7/18/2007 Cricket Communications 300 Dishonest Insider

Paperwork containing credit or debit card information for cell phone purchases was stolen from a Omaha store. The theft is suspected to be an inside job.

7/18/2007 Connecticut Transportation Committee 100 Website Exposure

Connecticut legislature's Transportation Committee inadvertently posted the Social Security numbers of about 100 former employees of now-defunct L.G. Defelice Inc. on a General Assembly Web site.

7/17/2007 Kingston Technology Co. 27,000 Hacking

A September 2005 security breach that remained undetected until "recently" may have compromised the names, addresses and credit card details of roughly 27,000 online customers.

7/17/2007 Louisiana Board of Regents 80,000 Website Exposure

More than 80,000 names and Social Security numbers were accessible on an internal Internet site run by the Louisiana Board of Regents, the body that has oversight over the state's institutions of higher education.

7/17/2007 Western Union 20,000 Hacking

Hackers raided a poorly secured Western Union database and stole names, addresses, phone numbers and complete credit-card information.

7/13/2007 Metropolitan St. Louis Sewer District 1,600 Dishonest Insider

A 10 year employee downloaded Social Security numbers of about 1,600 current or former district employees to a home computer as a means to retaliate against the district if that person was disciplined for poor performance.

7/13/2007 City of Encinitas, CA 1,200 Website Exposure

Credit card or checking account information and addresses for nearly 1,200 people who had enrolled in Encinitas' youth recreation programs was inadvertently posted on the city's Web site.

7/11/2007 Disney Movie Club / Alta Resources "Unknown" Dishonest Insider

Credit-card information of members was sold by an employee of a Disney contractor.

7/9/2007 Cuyahoga County Dept. of Development, OH 3,000 Stolen Memory Stick

Names, addresses, phone numbers and Social Security numbers were on a computer memory stick stolen during a carjacking.

7/5/2007 Highlands University, New Mexico 420 Office Break-in

Social Security numbers, credit card and bank account information of 420 students may have been compromised during a break-in at a building on campus.

7/3/2007 Fidelity National Information Services 2.3 Million Dishonest Insider

A worker at one of its subsidiaries, Certegy, stole 2.3 million consumer records containing credit card, bank account, driver's license number and other personal information.

6/28/2007 Harrison County Schools "Several" Stolen Computers

Several computers stolen from MSI Risk Management,which handles workers comp claims for the school board, contained personal information including social security numbers of employees who filed workers comp claims between January of 2001 and February of 2007.

6/27/2007 University of California, Davis 1,120 Hacking

A computer hacker gained access to names, birth dates and Social Security numbers of 2007-08 students who applied to the UC Davis veterinary school.

6/27/2007 Bowling Green State University 199 Lost Flash Drive

A flash drive belonging to an accounting professor was lost that contained the names and Social Security numbers of 199 students.

6/25/2007 Ohio Bureau of Workers' Compensation 439 Stolen Laptop

A laptop stolen from an auditor's attached garage contained personal information, including Social Security numbers.

6/23/2007 San Antonio Police, TX 230,000 Stolen Laptop

A laptop, which held files with the Social Security numbers, driver's license numbers and other sensitive information for roughly 230,000 licensed Texas peace officers, was stolen during a May 9 burglary of a Houston business.

6/23/2007 Winn-Dixie Stores, Inc. "Thousands" Discarded Records

Thousands of patient profiles including prescriptions, telephone numbers, Social Security numbers and addresses were left behind the grocery store when they closed in 2005.

6/22/2007 Texas First Bank 4,000 Stolen Laptop

Account numbers, social security numbers, names and addresses were on a laptop stolen during a car theft.

6/21/2007 American Airlines 365 Website Exposure

Personal information including Social Security numbers of more than 300 pilots and other employees at American Airlines was exposed on a company Web site.

6/16/2007 Texas A&M Corpus Christi 8,000 Lost Flash Drive

A professor vacationing off the coast of Africa lost a flash drive that included the Social Security numbers and dates of birth on just about every student on campus in 2006.

6/15/2007 State of Ohio 418,796 Stolen Backup Tape

A computer backup tape was stolen from the car of an intern assigned to take it home for safekeeping that contained names and Social Security numbers of 64,467 non-university state employees; the names, Social Security numbers, addresses and phone numbers of 53,797 employees enrolled in the state's pharmacy-benefits management program; and the names and Social Security numbers of 75,532 dependents, along with bank-account information for local governments, school districts and certain state employees and vendors. Names and Social Security numbers of 225,000 taxpayers were also on the tape.

6/14/2007 Coastal Community Credit Union 120,000 Stolen Backup Tapes

Computer backup tapes were stolen from a courier company during transit that contained the name, address, date of birth, social insurance number, member number, ATM/debit card number, credit card number, and/or balances of about 120,000 members.

6/13/2007 Lynchburg City 1,200 Website Exposure

Personal information on 1,200 employees and retirees was posted on the city’s Web site accidentally.

6/12/2007 Division of Workforce Services, Utah 20,000 Hacking

Children's Social Security numbers are believed to have been compromised by identity thieves.

6/12/2007 Grand Valley State University 3,000 Stolen Flash Drive

A flash drive containing about 3,000 Social Security numbers of current and former students were on a flash drive stolen from the English department at Lake Huron Hall.

6/11/2007 Pfizer Inc. 17,000 Unauthorized Access

A Pfizer employee installed unauthorized file-sharing software on a company laptop provided for use at her home, which allowed an unknown number of persons on a peer-to-peer network to access and copy Social Security numbers, names, addresses, and bonus information.

6/9/2007 Concord Hospital 9,297 Hacking

A hacker gained access to names, addresses, phone and Social Security numbers of patients when the hospital's online billing subcontractor turned off a firewall to perform maintenance, exposing the information, then didn't turn it on again.

6/8/2007 University of Iowa 1,100 Hacking

A hacker accessed a Web database program that stored Social Security numbers of faculty, students and prospective students of the Molecular and Cellular Biology program.

6/8/2007 University Of Virginia 5,735 Hacking

A vulnerability in a computer application resulted in the exposure of current and former U.Va. faculty members to a hacker on 54 separate days. Information accessed included names, Social Security numbers and dates of birth.

6/7/2007 North Dakota State University 57 Hacking

57 student loan records were subject to a breach, supposedly after a power surge, that left the records vulnerable to unauthorized Internet access over a two-week period.

6/7/2007 Dearfield Medical Building "Unknown"