Gordon Supply Company


Location

Glenside, PA
United States
Date Breach Made Public: 
October 12, 2013
geo: 
Glenside, PA
United States
Records Breached: 

400

A woman found two bags of personnel records in her backyard in mid-August.  The woman called the cops after discovering the sensitive information.  Social Security numbers, driver's license photos, addresses, phone numbers, medical information, dates of birth, emergency contacts, payroll history, and tax documents were exposed.  The breach occurred after the building was abandoned and the files were not checked before being discarded.  An estimated 400 people were affected.

Source: 
Media

Aaron's


Location

Atlanta, GA
United States
Date Breach Made Public: 
October 22, 2013
geo: 
Atlanta, GA
United States
Records Breached: 

Unknown

The US Federal Trade Commission filed a complaint against Aaron's over their practice of monitoring customer activity through software called Detective Mode.  It was determined that customers who rented computers were put at risk for identity theft by Aaron's practice of recording customer keystroke activity, screen shots, and images taken from webcams.  Aaron's may only use tracking technology with the consent of the renter and may not use technology that captures keystrokes, screenshots, images, or sounds on the devices it rents.  

Source: 
Media

Mount Sinai Medical Center


Location

Miami Beach, FL
United States
Date Breach Made Public: 
October 25, 2013
geo: 
Miami Beach, FL
United States
Records Breached: 

Unknown

An employee who was working at Mt. Sinani Medical Center through a temp agency was found with patient information during a traffic stop.  Police uncovered a bag that contained over 100 printouts with patient names, Social Security numbers, addresses, and dates of birth.  Photocopies of checks that had been written to Mt. Sinai Medical Center and corresponding billing statements were also found during the February 27, 2013 traffic stop.  Additional information that could be used for fraud was also found at the temporary employee's residence.

Source: 
PHIPrivacy.net

New York City Police Department


Location

New York, NY
United States
Date Breach Made Public: 
November 11, 2013
geo: 
New York, NY
United States
Records Breached: 

30 (No Social Security numbers or financial information reported)

A former police detective pleaded guilty to paying hackers to steal passwords associated with the email accounts of other officers.  The dishonest detective also misused the National Crime Information Center database to search for the information of at least two other NYPD officers.  The breaches occurred between April of 2010 and October of 2012. The dishonest detective was charged with one count of conspiracy to commit hacking and one count of unauthorized access.  The 30 or more people who were affected included 20 current and former NYPD officers.

Source: 
Media

Comprehensive Podiatry LLC


Location

Independence, OH
United States
Date Breach Made Public: 
November 8, 2013
geo: 
Independence, OH
United States
Records Breached: 

1,360 (No Social Security numbers or financial information reported)

The August 3 theft of a laptop resulted in the exposure of patient information.

Source: 
HHS via PHIPrivacy.net

JP Morgan Chase


Location

New York, NY
United States
Date Breach Made Public: 
October 1, 2013
geo: 
New York, NY
United States
Records Breached: 

Unknown

JP Morgan Chase customers received a privacy notification in early September. A labeling error caused the Social Security numbers of customers to be printed on the outside of the notification letter.  A lawsuit was filed against JP Morgan Chase on behalf of affected customers.  The lawsuit claims that JP Morgan did not immediately notify its customers and should have prevented the breach from happening.  The case is Alexander Furman et al v JP Morgan Chase & Co et al, No. 13-cv-06749, U.S. District Court, Northern District of Illinois.

Source: 
Media

Crown Castle International Corp


Location

Canonsburg, PA
United States
Date Breach Made Public: 
November 25, 2013
geo: 
Canonsburg, PA
United States
Records Breached: 

Unknown

Crown Castle determined on October 31 that their payroll information may have been accessed by hackers.  Employee names, Social Security numbers, and compensation may have been exposed.

Source: 
Media

Houston Methodist Hospital


Location

Houston, TX
United States
Date Breach Made Public: 
December 6, 2013
geo: 
Houston, TX
United States
Records Breached: 

1,300

The December 5 theft of an encrypted laptop and files resulted in the exposure of transplant patient information.  Names, Social Security numbers, and dates of birth may have been exposed.

Source: 
Media

Washington Post


Location

Washington, DC
United States
Date Breach Made Public: 
December 18, 2013
geo: 
Washington, DC
United States
Records Breached: 

Unknown

Hackers were able to access Washington Post employee usernames and passwords through an attack on the paper's servers.  The attack began through access to a server used by the Washington Post's foreign staff and then spread to more Washington Post servers.  The Washington Post and several other national papers were attacked in 2011 as well.

Source: 
Media

Comprehensive Psychological Services LLC


Location

Columbia, SC
United States
Date Breach Made Public: 
December 17, 2013
geo: 
Columbia, SC
United States
Records Breached: 

3,500 (No Social Security numbers or financial information reported)

The October 28 office theft of a laptop resulted in the exposure of patient information.  The laptop was password-protected and the patient files on it were not encrypted.  Neuropsychological testing, educational testing, custody evaluations, and other assessments and evaluations may have been exposed.

Source: 
HHS via PHIPrivacy.net
Showing 11-20 of 620 results
Syndicate content


X

Sign In!

Loading