[ISN] [Dataloss Weekly Summary] Week of Sunday, September 5, 2010

From: InfoSec News <alerts_at_private>
Date: Tue, 14 Sep 2010 01:45:16 -0500 (CDT)
========================================================================

Open Security Foundation - DataLossDB Weekly Summary
Week of Sunday, September  5, 2010

32 Incidents Added.

========================================================================

DataLossDB is a research project aimed at documenting known and reported 
data loss incidents world-wide. The Open Security Foundation asks for 
contributions of new incidents and new data for existing incidents. For 
any questions about the project or the data contained within this email 
or the website (http://www.datalossdb.org), please contact us at 
curators_at_private

========================================================================

DataLossDB News/Updates

  Open Security Foundation Announces New Advisory Board
  http://datalossdb.org/incident_highlights/50




========================================================================

Incidents Added


Reported Date: 2010-09-11
Summary: 80 teachers and administrators Social Security numbers inadvertently published on the web
Organizations: Corona-Norco Unified School District
http://datalossdb.org/incidents/3148
---------------------

Reported Date: 2010-09-09
Summary: 1,700 patient's medical records were accessed by employee
Organizations: Mayo Clinic
http://datalossdb.org/incidents/3121
---------------------

Reported Date: 2010-09-09
Summary: 12 applicants names, addresses, telephone numbers, driving history and criminal records posting on the web
Organizations: East Lothian Council
http://datalossdb.org/incidents/3123
---------------------

Reported Date: 2010-09-07
Summary: Names and Social Security numbers of about 7,000 on stolen computer
Organizations: City University of New York
http://datalossdb.org/incidents/3115
---------------------

Reported Date: 2010-09-05
Summary: Server hacked that compromised login information for students and staff
Organizations: Eastern Michigan University
http://datalossdb.org/incidents/3114
---------------------

Reported Date: 2010-09-05
Summary: Officer's names, ranks and division and confidential training material lost on missing USB drive
Organizations: Manchester Police
http://datalossdb.org/incidents/3116
---------------------

Reported Date: 2010-09-04
Summary: Discovered that medical records of the Essex Youth Commission are presently unaccounted
Organizations: Town of Essex
http://datalossdb.org/incidents/3113
---------------------

Reported Date: 2010-09-03
Summary: Package containing payroll checks and information on a CD lost in transit
Organizations: Benefit Concepts, Inc.
http://datalossdb.org/incidents/3145
---------------------

Reported Date: 2010-09-02
Summary: 3,400 customers credit card data compromised due to a vulnerability in point of sale systems at several properties
Organizations: HEI Hospitality
http://datalossdb.org/incidents/3119
---------------------

Reported Date: 2010-08-31
Summary: 300 credit card numbers stolen as part of a breach
Organizations: Serious Texas Bar-B-Q
http://datalossdb.org/incidents/3122
---------------------

Reported Date: 2010-08-30
Summary: Email containing employee Social Security numbers inadvertently sent to 144 ASU addresses
Organizations: Arkansas State University
http://datalossdb.org/incidents/3124
---------------------

Reported Date: 2010-06-16
Summary: Backup Tape sent FedEx missing, clients names, addresses, Social Security numbers exposed
Organizations: Idaho Power Company, Mercer Health and Benefits
http://datalossdb.org/incidents/3146
---------------------

Reported Date: 2010-06-14
Summary: Improper disposal of medical records left patients information exposed
Organizations: St. Johns Mercy Medical Group
http://datalossdb.org/incidents/3147
---------------------

Reported Date: 2010-05-11
Summary: 386 Social Security numbers of employees exposed from stolen hard drive
Organizations: Darden Restaurants, Olive Garden
http://datalossdb.org/incidents/3143
---------------------

Reported Date: 2010-04-09
Summary: Unencrypted USB with client information lost unknown number exposed
Organizations: Hartford Life Insurance Company, Woodbury Financial Services
http://datalossdb.org/incidents/3138
---------------------

Reported Date: 2009-12-19
Summary: 1,100 credit card details contained on stolen computer
Organizations: Pure Style
http://datalossdb.org/incidents/3125
---------------------

Reported Date: 2009-10-05
Summary: Employee uses hand-held skimmer device to steal credit card numbers
Organizations: Nordstrom
http://datalossdb.org/incidents/3136
---------------------

Reported Date: 2009-08-14
Summary:  Employee recorded customers account numbers from phone orders
Organizations: Lincoln Center Inc.
http://datalossdb.org/incidents/3137
---------------------

Reported Date: 2009-07-27
Summary: Employee mistakenly emails client information to an outside address
Organizations: Benefit Strategies LLC
http://datalossdb.org/incidents/3128
---------------------

Reported Date: 2009-05-11
Summary: Trojan installed on system was stealing customers credit card numbers
Organizations: America's Pet Store
http://datalossdb.org/incidents/3140
---------------------

Reported Date: 2009-04-30
Summary: Unauthorized access to database exposes names and Social Security numbers
Organizations: Center for American Progress
http://datalossdb.org/incidents/3135
---------------------

Reported Date: 2009-04-21
Summary: Two computers stolen from office which contained access to RMV database
Organizations: Massachusetts Registry of Motor Vehicles, Daniel C. Brightwell Insurance Agency
http://datalossdb.org/incidents/3134
---------------------

Reported Date: 2009-03-03
Summary: Bag containing paperwork and flash drive stolen from car in parking lot
Organizations: Massachusetts Department of Health and Human Services, Old Colony YMCA
http://datalossdb.org/incidents/3141
---------------------

Reported Date: 2009-02-24
Summary: 1387 Credit Card numbers stolen from 2 different malicious attacks by third party
Organizations: Foxboro Federal Savings
http://datalossdb.org/incidents/3126
---------------------

Reported Date: 2008-09-11
Summary: 888 credit cards of customers stolen by hacker 
Organizations: Charlie Brown's Family Sports Grill
http://datalossdb.org/incidents/3130
---------------------

Reported Date: 2008-07-28
Summary: Hacker steals 996 credit card numbers from computer system
Organizations: Oak Street Cafe
http://datalossdb.org/incidents/3127
---------------------

Reported Date: 2008-07-03
Summary: Stolen laptop from employee car contains personal information
Organizations: Nationwide Mutual Insurance
http://datalossdb.org/incidents/3142
---------------------

Reported Date: 2008-03-14
Summary: 1,771 records exposed from stolen laptop from central office
Organizations: North Carolina Employment Security Commission
http://datalossdb.org/incidents/3132
---------------------

Reported Date: 2008-02-13
Summary: Laptop stolen from office contained personal information of patients
Organizations: Fresenius Medical Care Holdings Inc. (FMCNA)
http://datalossdb.org/incidents/3131
---------------------

Reported Date: 2007-04-03
Summary: Laptop stolen from employee vehicle, exposes name and Social Security numbers
Organizations: College Loan Corp.
http://datalossdb.org/incidents/3139
---------------------

Reported Date: 2007-01-26
Summary: Employee lost laptop and USB device containing customers confidential information
Organizations: UPS Capital Business Credit , U.S. Farm Credit Administration
http://datalossdb.org/incidents/3133
---------------------

Reported Date: 2006-02-10
Summary: 5000 accounts possibly exposed as bot gains access to windows 2000 server on their network
Organizations: Cattaraugus-Allegany-Erie-Wyoming BOCES
http://datalossdb.org/incidents/3129
---------------------


========================================================================

Blotter Posts


Added: 2010-09-12
Title: Colorado gets first victims advocate for ID theft cases
http://www.denverpost.com/business/ci_16045935?source=rss
---------------------

Added: 2010-09-10
Title: Avoiding ID Theft In Social Networks
http://feedproxy.google.com/~r/InvestingRss/~3/7BqAykktcCE/Article.aspx
---------------------

Added: 2010-09-09
Title: Data theft hits 7,000 CUNY students - weeks ago
http://feeds.nydailynews.com/~r/nydnrss/ny_local/~3/54Tmh7EwYIQ/2010-09-07_data_theft_hits_cuny_students.html
---------------------

Added: 2010-09-06
Title: Advice: Leave Cards With ID At Home
http://www.myfoxboston.com/dpps/news/advice%3A-leave-cards-with-id-at-home-dpgonc-km-20100905_9502249
---------------------


_______________________________________________
Dataloss Mailing List (dataloss_at_private)

CREDANT Technologies, a leader in data security, offers advanced data encryption solutions.
Protect sensitive data on desktops, laptops, smartphones and USB sticks transparently 
across your enterprise to ensure regulatory compliance.
http://www.credant.com/stopdataloss


_______________________________________________________      
Subscribe to InfoSec News - www.infosecnews.org
http://www.infosecnews.org/mailman/listinfo/isn
Received on Mon Sep 13 2010 - 23:45:16 PDT

This archive was generated by hypermail 2.2.0 : Mon Sep 13 2010 - 23:52:15 PDT