Archive for June, 2006

USDA Data Breach

Monday, June 26th, 2006

Data Loss Source: United States Department of Agriculture

Date of Loss: June 2006

Size of Loss: 26,000 files

Affected Individuals: Current and former employees

Geographic Focus: Washington, D.C.

Data contained: names, Social Security numbers and photos.

Additional Notes: The hack occurred during the first weekend of June. USDA Secretary Mike Johanns found out about the intrusion on June 6. The USDA said Johanns was told at that time that no personal identity information was at risk.

However, further forensic analysis revealed that it was “uncertain” whether employee personal data was adequately protected during the hack, prompting Johanns to issue a public notice of the intrusion.

Additional Information: Internet News

US Navy Data Breach

Monday, June 26th, 2006

Data Loss Source: US Navy

Date of Loss: June 2006

Size of Loss: 28,000 files

Affected Individuals: Navy members and dependents

Geographic Focus: Nationwide

Data contained: names, birth dates and Social Security numbers.

Additional Notes: According to the Navy, there is no evidence that any of the data has been used illegally. The files have been removed from the site, and the Navy is investigating how and when the files were placed on the Internet.

Additional Information: Internet News

San Francisco University State University Data Breach

Monday, June 26th, 2006

Data Loss Source: San Francisco State University     

Date of Loss: June 2006

Size of Loss: 2800 files

Affected Individuals: Current and former San Francisco State University

Geographic Focus: California

Data contained: Social security numbers, in some cases, the files included phone numbers and grade point averages.

Additional Notes: Data stolen when a thief broke into a faculty member’s car and swiped a laptop computer.

Additional Information: San Jose Mercury News

FTC Data Breach

Monday, June 26th, 2006

Data Loss Source: Federal Trade Commission

Date of Loss: June 2006

Size of Loss: 110 records

Affected Individuals: individuals involved in FTC cases and enforcement actions.

Geographic Focus: Nationwide

Data contained: names, addresses, Social Security numbers, and personal financial information.

Additional Notes: According to an FTC press statement, the laptops were password-protected, and the agency believed the data was not the target of the theft. The FTC provided no clarification as to why they believed this, the location of the theft, or why the data was on the laptops.

Additional Information: Fox News

AIG Data Breach

Wednesday, June 21st, 2006

Data Loss Source: American International Group        

Date of Loss: March 2005

Size of Loss: 970,00 records

Affected Individuals: 970,000 employees at several hundred companies.

Geographic Focus: Nationwide

Data contained: personal information

Additional Notes: information that had been collected by brokers and aggregated on one computer in order to solicit a quote from AIG

Additional Information:  InformationWeek