Archive for the 'Uncategorized' Category

Buena Vista University Breach

Thursday, July 22nd, 2010

Data Loss Source: Buena Vista University recently exposed its database with thousands of records. University officials say a computer forensics team discovered the breach, which may include names, social security numbers, and driver’s license numbers for 93,000 BVU students, parents, faculty and staff, alumni, and some donor records dating back to 1987.

Date of Breach: July 2010

Size of Loss: 83,000

Affected Individuals:  University students, alumni, and staff

Geographic Focus: Iowa

Data contained: Social Security numbers and other data

Additional Notes: University officials say there hasn’t been any indication that the information has been misused.

Additional Information: KMEG 14

http://www.kmeg14.com/Global/story.asp?S=12822306

State Agency Posts Client Data Online

Monday, July 19th, 2010

Data Loss Source: A Maryland Department of Human Resources employee was placed on administrative leave after posting the Social Security numbers and other personal information of nearly 3,000 clients of a state agency on a third-party website.

Date of Breach: July 2010

Size of Loss: 3,000

Affected Individuals:  Maryland Department of Human Resources clients

Geographic Focus: Maryland

Data contained: Social Security numbers and other data

Additional Notes: The agency provides benefits such as food stamps and other aid, will offer affected clients a year of credit monitoring.

Additional Information: Baltimore Sun
http://www.baltimoresun.com/news/opinion/bs-md-dhr-ssn-posted-online-20100719,0,4049530.story

iPad Security Breach

Monday, June 21st, 2010

Data Loss Source: An iPad security breach potentially exposed the personal information of 114,000 AT&T customers.

Date of Breach: June 2010

Size of Loss: 114,000

Affected Individuals:  AT&T customers

Geographic Focus: U.S.

Data contained: Customers’ email addresses and ICC-ID numbers, which could reveal a lot about users, their identity and their location.

Additional Notes: Once a hacker has an IMSI, they can get a user’s phone number, which potentially exposes more data such as a subscriber’s address and physical location.

Additional Information: TechCrunch.com

Medicaid Breach

Wednesday, June 2nd, 2010

Data Loss Source: New Mexico’s Human Service Department reported a stolen laptop containing Medicaid information.

Date of Breach: May 2010

Size of Loss: 9,500

Affected Individuals:  9,500 patients enrolled in the New Mexico’s Medicaid Salud program

Geographic Focus: New Mexico

Data contained: Names, addresses, phone numbers, health plan identification numbers and Social Security numbers

Additional Notes: The computer was password-protected, but otherwise did not have safeguards to prevent unauthorized access to the information.

Additional Information: ESecurityPlanet.com

Student Data Posted Online

Tuesday, September 1st, 2009

Data Loss Source: Parents of Metro Nashville students will receive letters outlining a security breach that put their children’s Social Security numbers online for three months.
Date of Breach: March 5, 2009
Size of Loss : 18,541
Affected Individuals: Metro Nashville students
Geographic Focus: Nashville, TN
Data contained: Student names, gender, race or ethnicity, date of birth, Social Security number and parent names.
Additional Notes: Boston-based Public Consulting Group Inc., which holds a five-year, $2.6-million-a-year contract with the state to collect student data from various districts, corrected the error March 31 after a parent using Google to search her daughter’s name found it — along with personal data for the students and 6,000 parent names. The consulting group will pay for parents of affected children to check all family members’ credit reports and for a year of monitoring.
Additional Information: The Tennessean