======================================================================== Open Security Foundation - DataLossDB Weekly Summary Week of Sunday, March 20, 2011 20 Incidents Added. ======================================================================== DataLossDB is a research project aimed at documenting known and reported data loss incidents world-wide. The Open Security Foundation asks for contributions of new incidents and new data for existing incidents. For any questions about the project or the data contained within this email or the website (http://www.datalossdb.org), please contact us at curators_at_private ======================================================================== DataLossDB News/Updates No news this week! ======================================================================== Incidents Added Reported Date: 2011-03-24 Summary: 970 credit card numbers and expiration dates accessed after malware infection of online site to purchase park passes Organizations: InfoSpherix, Maine Department of Conservation (Bureau of Parks and Lands) http://datalossdb.org/incidents/3501 --------------------- Reported Date: 2011-03-23 Summary: 200 employees' names, addresses, dates of birth and National Insurance numbers sent to member of the public, in error Organizations: Spectrum Housing http://datalossdb.org/incidents/3500 --------------------- Reported Date: 2011-03-22 Summary: Disk with 24,903 students' records with Social Security numbers missing after arrival at state office building Organizations: Texas Education Agency, Laredo Independent School District, University of Texas at Dallas (Education Research Center) http://datalossdb.org/incidents/3502 --------------------- Reported Date: 2011-03-17 Summary: Completed job applications for municipal judge containing Social Security numbers, drivers' license numbers, names and other details were found in a dumpster Organizations: City of Cleveland Council http://datalossdb.org/incidents/3496 --------------------- Reported Date: 2011-03-01 Summary: Employee improperly accessed 2,250 patients' personal information some medical information. Organizations: Memorial Health Services (MemorialCare Health System) http://datalossdb.org/incidents/3483 --------------------- Reported Date: 2011-02-08 Summary: Personal data of 1656 residents including names, birthdates, gender, language, ethnicity, telephone numbers, and reason for contact on two unencrypted laptops stolen from a council's after-hours employee's home Organizations: Ealing Council , Hounslow Council http://datalossdb.org/incidents/3494 --------------------- Reported Date: 2011-02-03 Summary: 694 merged credit reports containing names, current and former addresses, Social Security number, date of birth, employer history, trade lines, and even account numbers accessed by hackers in multiple intrusions Organizations: ACRAnet Inc. http://datalossdb.org/incidents/3484 --------------------- Reported Date: 2011-02-03 Summary: 784 merged credit reports containing names, current and former addresses, Social Security number, date of birth, employer history, credit account histories and information, and even account numbers accessed by hackers over multiple intrusions in 2008. Organizations: SettlementOne Credit Corporation, Sackett National Holdings Inc. http://datalossdb.org/incidents/3486 --------------------- Reported Date: 2011-02-03 Summary: 323 merged credit reports containing full name, current and former addresses, Social Security number, date of birth, employer history, credit account histories and information, and even account numbers accessed by hackers over multiple intrusions Organizations: Fajilan and Associates Inc (Statewide Credit Services) http://datalossdb.org/incidents/3485 --------------------- Reported Date: 2011-02-02 Summary: 17 patients' names and x-rays on DVDs found in furniture sold at surplus Organizations: University of Washington Medical Center http://datalossdb.org/incidents/3493 --------------------- Reported Date: 2011-01-29 Summary: 9,922 patients' names, dates of birth, and blood chemistry lab results on missing backup disk Organizations: Texas Health Harris Methodist Hospital - Azle http://datalossdb.org/incidents/3489 --------------------- Reported Date: 2011-01-26 Summary: Clients’ names, addresses, telephone numbers, birth dates, Social security numbers, marital status, income, race, ethnicity, and disability determination on missing computer disks Organizations: North Carolina Department of Health and Human Services - Division of Services for the Deaf and the Hard of Hearing http://datalossdb.org/incidents/3490 --------------------- Reported Date: 2011-01-19 Summary: Thousands of Sydney University students records available online simply by changing field in URL Organizations: Sydney University http://datalossdb.org/incidents/3499 --------------------- Reported Date: 2011-01-19 Summary: Summary sheets with 50 current and former employees' names, addresses, Social Security numbers, and wages arrived wrinkled and looking "tampered with" Organizations: FedEx, Ceridian Corporation, Ember Corporation http://datalossdb.org/incidents/3492 --------------------- Reported Date: 2011-01-18 Summary: Customers' credit card numbers captured during transaction used fraudulently Organizations: Michael’s Rock Hill Grille http://datalossdb.org/incidents/3491 --------------------- Reported Date: 2011-01-18 Summary: Documents discarded in dumpster during office move included Social Security Numbers, names, addresses, phone numbers, birthdates, medical history, some financial information. Organizations: Metropolitan Life Insurance Company (MetLife) http://datalossdb.org/incidents/3497 --------------------- Reported Date: 2010-11-01 Summary: Lost memory stick contained personally identifying and sensitive data on chronically excluded and vulnerable adults, including contact notes. Organizations: Cambridgeshire County Council http://datalossdb.org/incidents/3495 --------------------- Reported Date: 2010-03-23 Summary: Unencrypted back-up drives stolen from a safe contained 21,000 dental patients' names, contact and insurance information, Social Security numbers, dates of birth, and treatment history Organizations: Ernest T. Bice, Jr. DDS, P.A. http://datalossdb.org/incidents/3488 --------------------- Reported Date: 2005-05-21 Summary: Six stolen laptops contained employees' personal and payroll informatione local workers wondering if the thief is targeting their bank accounts Organizations: LifeCare Management Services LLC http://datalossdb.org/incidents/3487 --------------------- Reported Date: 2003-05-30 Summary: 6500 patients' medical and billing records on server accessed by hacker. Organizations: Southwest Family Medicine http://datalossdb.org/incidents/3498 --------------------- ======================================================================== Blotter Posts Added: 2011-03-26 Title: Identity Theft Prompts Prison Time http://feeds.pcworld.com/click.phdo?i=c9b0b1f8cea60fc3295cf7fa8ff906ab --------------------- Added: 2011-03-26 Title: Identity Theft Prompts Prison Time http://feeds.pcworld.com/click.phdo?i=c9b0b1f8cea60fc3295cf7fa8ff906ab --------------------- Added: 2011-03-26 Title: Can a Man Call Squatter's Rights on Your Identity After 30 Years of Use? http://slog.thestranger.com/slog/archives/2011/03/25/can-a-man-call-squatters-rights-on-your-identity-after-30-years-of-use --------------------- Added: 2011-03-26 Title: Medical identity theft a rising and significant threat http://www.networkworld.com/news/2011/032511-medical-identity-theft-a-rising.html?source=nww_rss --------------------- Added: 2011-03-24 Title: Bill imposes criminal penalties for impersonation or identity theft on Internet http://www.nj.com/gloucester-county/index.ssf/2011/03/bill_imposes_criminal_penaltie.html --------------------- Added: 2011-03-24 Title: Disney president promises to fix ID-theft risk http://ocresort.ocregister.com/2011/03/24/disney-president-promises-to-fix-id-theft-risk/73207/ --------------------- Added: 2011-03-24 Title: Hackers Take Schools To School http://www.darkreading.com/smb-security/167901073/security/news/229400154/hackers-take-schools-to-school.html --------------------- Added: 2011-03-24 Title: Our Opinion: Medical theft is a growing problem http://www.timesrecordnews.com/news/2011/mar/24/3-34_editorial/?partner=RSS --------------------- Added: 2011-03-24 Title: MN suspect in $10M ID theft ring has fled country http://feeds.bizjournals.com/~r/bizj_twincities/~3/kjooYn6JpUo/mn-suspect-in-id-theft-ring-missing.html --------------------- Added: 2011-03-24 Title: Protect Your Privacy: Avoid Identity Theft http://feeds.pcworld.com/click.phdo?i=04e756e708a281b1d95d30e318717864 --------------------- Added: 2011-03-24 Title: Identity Theft: How to Reduce Risks and Costs http://feeds.pbs.org/~r/pbs/nbr-blog/~3/5K4ygadZurE/identity_theft_reduce_risk.html --------------------- Added: 2011-03-23 Title: Soldier's personal records surface at Goodwill store http://hillsboro.katu.com/news/news/soldiers-personal-records-surface-goodwill-store/439289 --------------------- Added: 2011-03-23 Title: IDENTITY THEFT BY THE NUMBERS http://www.startribune.com/lifestyle/yourmoney/118256764.html --------------------- Added: 2011-03-23 Title: Card data skimmed at local gas stations http://www.khon2.com:80/news/local/story/Card-data-skimmed-at-local-gas-stations/zQKPzQewdUyct5MH8sTe1w.cspx?rss=1803 --------------------- Added: 2011-03-21 Title: Up To 75 VA Patient ID Cards Missing http://www.kptv.com/news/27262169/detail.html --------------------- _______________________________________________ Dataloss Mailing List (dataloss_at_private) CREDANT Technologies, a leader in data security, offers advanced data encryption solutions. Protect sensitive data on desktops, laptops, smartphones and USB sticks transparently across your enterprise to ensure regulatory compliance. http://www.credant.com/stopdataloss ___________________________________________________________ Tegatai Managed Colocation: Four Provider Blended Tier-1 Bandwidth, Fortinet Universal Threat Management, Natural Disaster Avoidance, Always-On Power Delivery Network, Cisco Switches, SAS 70 Type II Datacenter. Find peace of mind, Defend your Critical Infrastructure. http://www.tegataiphoenix.com/Received on Mon Mar 28 2011 - 23:18:13 PDT
This archive was generated by hypermail 2.2.0 : Mon Mar 28 2011 - 23:22:23 PDT