Batteries.com Data Breach

June 2nd, 2009

Data Loss Source: Batteries.com, an online seller of batteries for consumer electronics reported a data breach to the New Hampshire Department of Justice. The company said it was caused by a hacked server.
Date of Breach: March 2009
Size of Loss : 865
Affected Individuals: New Hampshire residents
Geographic Focus: New Hampshire
Data contained: The hackers stole names, addresses and credit card information from the Batteries.com server, the company said.
Additional Notes: Customer notifications of the data breach went out in mid-May, the company said.
Additional Information: Computerworld.com

Shell Customers at Risk of Identity Theft

June 2nd, 2009

Data Loss Source: Oil giant Shell is warning customers in New Zealand and Australia about potential security risks after their information was exposed in a Web site attack
Date of Breach: March 19, 2009
Size of Loss : 5,900
Affected Individuals: Shell customers
Geographic Focus: New Zealand and Australia
Data contained: Personal information
Additional Notes: Personal information was exposed after someone broke into a Web site that housed credit applications for Shell fuel cards.
Additional Information: The Tech Herald

Retiree Data Sent Via Email

April 26th, 2009

Data Loss Source: Personal information of state retirees was emailed to the Kentucky Retirement Systems (KRS) without being properly encrypted for security purposes by its pharmacy benefit provide.
Date of Breach: March 19, 2009
Size of Loss : 28,000
Affected Individuals: Retirees
Geographic Focus: Deerfield, IL
Data contained: The email contained dates of birth, Social Security numbers and health insurance claim numbers but not personal health information.
Additional Notes: The file contained information only on members who were both Medicare-eligible and used the retiree pharmacy benefit through Walgreens in 2007.

Symantec Customer Data Compromised

April 20th, 2009

Data Loss Source: Security software provider Symantec warned a small number of customers that their credit card numbers may have been stolen from an Indian call center used by the company.
Date of Breach: March 31, 2009
Size of Loss : 200
Affected Individuals: Symantec customers
Geographic Focus: Cupertino, CA
Data contained: Credit card numbers
Additional Notes: Symantec is investigating allegations that a call center in India leaked credit card numbers of its customers to someone who then sold them to BBC News reporters posing as criminals.
Additional Information: CNET News

Stolen Laptop Puts Patients at Risk of Identity Theft

April 16th, 2009

Data Loss Source: A laptop computer recently stolen at the Palo Alto Medical Foundation’s Santa Cruz office contained personal and medical information of Santa Cruz County patients.
Date of Breach: April 1, 2009
Size of Loss : 1,000
Affected Individuals: Santa Cruz County patients
Geographic Focus: Palo Alto, CA
Data contained: The information on the computer included EMG results, the patients’ medical record numbers, treatment plans and diagnoses.
Additional Notes: The foundation has offered its patients free credit and identity fraud monitoring and warned them to contact local authorities if they notice anything suspicious on their credit reports.
Additional Information: San Jose Mercury News