Archive for October, 2008

Medical Mutual of Ohio Data Breach

Monday, October 27th, 2008

Data Loss Source: Eleven computer disks containing personal information on Ohio retirees and employees were reported missing by Cleveland-based medical insurer Medical Mutual of Ohio.
Date of Breach: Oct. 23, 2008
Size of Loss : 36,000
Affected Individuals: Retirees and employees
Geographic Focus: Columbus, OH
Data contained: Personal information
Additional Notes: It seems insufficient postage was placed on the envelopes (containing the disks), therefore they are believed that they are likely to still be safe within the postal system.
Additional Information: Cleveland.com

The Planet Warns of Data Breach

Friday, October 24th, 2008

Data Loss Source: Hosting provider The Planet detected a security breach that may have affected the customer portal account and server passwords.
Date of Breach: Oct. 17, 2008
Size of Loss : 25,000
Affected Individuals: The Planet customers
Geographic Focus: U.S.
Data contained: Customer portal log-in names and passwords.
Additional Notes: The Planet identified the methods by which the systems were compromised and have closed those holes. Only two user accounts were definitely affected, and no credit card information is believed to have been compromised.
Additional Information: Web Host Industry News

University of Indianapolis Hacked

Monday, October 20th, 2008

Data Loss Source: University of Indianapolis reported that more than 11,000 archived records of students, faculty and staff were broken into by a hacker or hackers.
Date of Breach: Oct. 16, 2008
Size of Loss : 11,000
Affected Individuals: University of Indianapolis students, staff and alumni
Geographic Focus: Indianapolis
Data contained: Social Security numbers, tuition payment records and pre-paid credit cards used in on-campus purchases.
Additional Notes: University of Indianapolis administrators are still unsure how the stolen information might have been used; they only know that it was compromised. They are offering free credit monitoring to people affected by the breach.
Additional Information: The Exponent

Deutsche Telekom Loses 17 Million Records

Thursday, October 16th, 2008

Data Loss Source: Deutsche Telekom has reported that it lost personal data for about 17 million T-Mobile Germany customers in the spring of 2006, when thieves got their hands on a storage device with personal data.
Date of Breach: Oct. 11, 2008
Size of Loss : 17 million
Affected Individuals: German citizens
Geographic Focus: Germany
Data contained: Names, addresses, cell phone numbers, and some birth dates and e-mail addresses for high-profile German citizens. The company said the records did not contain bank details, credit card numbers, or call data.
Additional Notes: T-Mobile Germany said it has taken multiple steps to shore up its security since the breach, including tighter restrictions on who has access to information, more complex passwords, and increased monitoring of security systems.
Additional Information: Information Week

Stolen Laptop Puts Alumni at Risk

Tuesday, October 14th, 2008

Data Loss Source: A laptop computer containing personal and financial information belonging to more than 84,000 University of North Dakota alumni, donors and others was stolen from the vehicle of a software vendor retained by the UND Alumni Association.
Date of Breach: Oct. 11, 2008
Size of Loss : 84,000
Affected Individuals: University of North Dakota alumni and donors
Geographic Focus: North Dakota
Data contained: The private information, including credit card and Social Security numbers, is protected by a data encryption system and other security controls, the association said.
Additional Notes: There has been no evidence that the information in the stolen laptop has been used.
Additional Information: Bismarck Tribune