Data Loss Source: A breach in an Oklahoma State University computer server exposed names, addresses and Social Security numbers of students, staff and faculty who bought parking and transit services permits in the past six years.
Date of Loss: May 19, 2008
Size of Loss : 70,000
Affected Individuals: Students and staff
Geographic Focus: Stillwater, OK
Data contained: The personal data included names, addresses and Social Security numbers.
Additional Notes: OSU did not announce the breach or begin notifying permit holders until Wednesday, even though it was discovered in March. Officials said they first wanted to do an investigation to see if any Social Securities numbers had been accessed. They were not able to make a determination.
Additional Information: www.newsok.com

Data Loss Source: Duke University’s Fuqua School of Business is notifying former New York University students that some of their personal information was inadvertently accessible by targeted Internet searches. The former NYU students were part of a class taught by a current member of Fuqua’s faculty during the professor’s employment at NYU in 1997.
Date of Loss: May 21, 2008
Size of Loss : 273
Affected Individuals: Students
Geographic Focus: New York, NY
Data contained: The personal data included names and Social Security numbers and was contained in the faculty member’s research records.
Additional Notes: The information could have been accessed only if searched by specific student names, along with a search code for Social Security numbers.
Additional Information: www.nbc17.com

Data Loss Source: The well-intended gift of a used computer by a Jacksonville physician may have put the personal medical information of 1,900 patients at risk, University of Florida privacy officials said. The doctor had stored digital information on his patients on a computer, which he gave to a family as a gift. A member of that family replaced the computer’s operating system and most of the patient information was lost.
Date of Loss: May 20, 2008
Size of Loss : 1,900
Affected Individuals: Patients
Geographic Focus: Jacksonville, FL
Data contained: Digital photos, as well as identifying information as their names, dates of birth, and Social Security or Medicare numbers.
Additional Notes: Although the computer has been recovered and officials say the risk of anyone misusing the information is extremely low, a letter has gone out from the university to all of the patients whose information might have been compromised.
Additional Information: The Ledger

Data Loss Source: SAIC stockholders are at risk of identity theft after a box of magnetic backup tapes went missing.
Date of Loss: May 6, 2008
Size of Loss : 1,300
Affected Individuals: SAIC stockholders
Geographic Focus: San Diego, CA
Data contained: The tapes contained names, addresses, Social Security numbers, stock account information, transaction activity and possibly bank account numbers for current or former shareholders.
Additional Notes: The tapes owned by Bank of New York Mellon, which acts as stock transfer agent for SAIC, contained names, addresses, Social Security numbers, stock account information, transaction activity and possibly bank account numbers for 1,376 current or former shareholders, said the company also known as Science Applications International Corp.
Additional Information: www.SignOnSanDiego.com

Data Loss Source: About 13,000 employees at Pfizer Inc. had their personal information compromised when a company laptop and flash drive were stolen.
Date of Loss: May 12, 2008
Size of Loss : 1,300
Affected Individuals: Pfizer employees
Geographic Focus: New York, NY
Data contained: Names, home addresses, home telephone numbers, employee ID numbers, positions and salaries were possibly compromised. Other information possibly lost included the department employees worked in, the Pfizer site where the employees worked, the name of employees’ managers and descriptions of their jobs.
Additional Notes: The data breach, which occurred about a month ago, was the second this year affecting Pfizer Inc. employees and the sixth made public in a one-year span dating back to May 2007.
Additional Information: www.TheDay.com