United States Army

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
September 15, 2011
geo: 
Alexandria , VA
United States
Virginia US
Records Breached: 

25,000

A CD with sensitive Non-Appropriated Fund retiree information was lost in the mail between Alexandria, Virginia and San Antonio, Texas.  The CD never officially arrived after being sent during the last week of August.  It contained retiree records with names, Social Security numbers, retirement date, type of retirement, amount of life insurance carried, term data, dates of service, and other retirement data.

Source: 
Databreaches.net

Department of Social and Health Services - Washington

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
August 10, 2011
geo: 
Seattle , WA
United States
Washington US
Records Breached: 

3,950 (No SSNs or financial information reported)

A coding error caused mailing mistakes to be made in July.  Medical enrollment forms with the addresses of custodial parents were sent to non-custodial parents.  However, no addresses were disclosed in cases involving foster care of domestic violence.

Source: 
Databreaches.net

City of Pittsburgh

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
August 1, 2011
geo: 
Pittsburgh , PA
United States
Pennsylvania US
Records Breached: 

29

Someone obtained employee names, addresses and possibly Social Security numbers.  Fraudulent accounts could be set up with this information.  Multiple city employees from different departments received bills from PayPal for purchases they did not make.  The fraudulent charges range from $40 to $3,000.  It is not clear how the thieves accessed Pittsburgh city employee information. Police officers and other Department of Public Safety employees are among those who were affected.

Source: 
Databreaches.net

Franklin County Children Services, Parenthesis Family Advocates

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
August 3, 2011
geo: 
Columbus , OH
United States
Ohio US
Records Breached: 

Unknown

A boxes of files were found by a recycling bin.  The files contained sensitive information from children with Franklin County Children Services.  Medical information, criminal records and other personal documents were left out in the open.  The papers have been linked to someone with access to Parenthesis' documents; however the cause of the breach is unknown.

Source: 
Databreaches.net

Department of Veterans Affairs

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
August 8, 2011
geo: 
Fayetteville , NC
United States
North Carolina US
Records Breached: 

Unknown

A dishonest VA worker used his tax return preparation business to submit fraudulent tax returns.  VA patient personal information such as names, Social Security numbers and birth dates were used to create fake dependents on people's tax returns.  The VA worker then collected fees from customers in exchange for fraudulently increasing the dollar amount of their tax returns. He was convicted in February and sentenced to 11 years in federal prison. The employee handled information from VA patients in North Carolina and Virginia.

Source: 
PHIPrivacy.net

University of Arizona

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
August 4, 2011
geo: 
Tucson , AZ
United States
Arizona US
Records Breached: 

Unknown

A hacker accessed the employee listserv on or around August 4.  This allowed an unauthorized party to send an offensive photo and additional lewd messages through the University's mailing list.  The listserv is normally only used by administrators to transmit official University business.  It is unclear if any information was exposed.

Source: 
Databreaches.net

Department of Veterans Affairs

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
August 3, 2011
geo: 
Washington , DC
United States
District Of Columbia US
Records Breached: 

Unknown

The inspector general at the VA found that IT contractors had accessed the VA's electronic health record system without appropriate security clearances.  An tipster had left a message about the situation on a departmental hotline in the summer of 2010.  Contractor personnel were found to be improperly sharing user accounts when accessing VA networks and the Veterans Health Information System and Technology Architecture systems. Employees of the contracting company were unaware of proper IT security protocol.

Source: 
PHIPrivacy.net

Passaic County Jail

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
January 6, 2010
geo: 
Paterson , NJ
United States
New Jersey US
Records Breached: 

Unknown

Inmates used the library logs at Passaic to obtain the personal information of other inmates. The inmates then called outside conspirators in order to defraud American Express and inmates of over $450,000.  Fake American Express credit cards were created from the information and used to deposit funds into Bank of America accounts or to make purchases. The scheme occurred between September of 2007 and April of 2008.

Source: 
Dataloss DB

Minnesota Department of Labor & Industry

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
January 19, 2010
geo: 
St. Paul , MN
United States
Minnesota US
Records Breached: 

759

It was discovered that an hourly employee of 19 years was forging checks by using the information of companies who were fined for OSHA violations.  The employee had handled checks for 12 years and may have been involved in a larger fraud operation.  The employee was arrested and fraudulently obtained less than a thousand dollars on average from each company.  A total of 759 companies who paid OSHA fines between January 1, 2009 and November 18, 2010 were affected.  One business owner discovered that a fraudulent check had been cashed for $745 after he paid an OSHA fine of $315.

Source: 
Dataloss DB

Colorado Department of Health Care Policy and Financing (HCPF)

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
July 1, 2011
geo: 
Denver , CO
United States
Colorado US
Records Breached: 

3,590 (No SSNs or financial information reported)

A disk with the information of medical-aid applicants was lost on its way between HCPF and another agency. It contained applicant names, state identification numbers, and addresses. The disk was discovered missing on May 6.

Source: 
PHIPrivacy.net

Pages

Showing 1-10 of 725 results
Subscribe to GOV