University of Virginia, Aetna Health Care

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
July 19, 2013
geo: 
Charlottesville , VA
United States
Virginia US
Records Breached: 

18,700

A mailing error by a third-party mailing vendor used by Aetna Health Care resulted in the Social Security numbers of students being exposed in open-enrollment brochures.

Source: 
Media

Western Connecticut State University

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
November 30, 2012
geo: 
Danbury , CT
United States
Connecticut US
Records Breached: 

235,000

A computer vulnerability allowed the information of students, student families, and other people affiliated with the University to be exposed. The records covered a 13 year period and included Social Security numbers.  High school students who had associations with the University may have had their SAT scores exposed as well.  The issue existed between April 2009 and September 2012.  

Source: 
Media

Jackson Health System, Jackson South Community Hospital

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
December 11, 2012
geo: 
Miami , FL
United States
Florida US
Records Breached: 

566 (No SSNs or financial information exposed)

Approximately 1,200 photo records of 566 patients were publicly posted on November 30.  The information was removed and two managers resigned as a result of the breach.

Source: 
Media

Internal Revenue Service (IRS)

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
July 8, 2013
geo: 
Washington , DC
United States
District Of Columbia US
Records Breached: 

10,000

Public.Resource.org received 990-T forms with sensitive information during a request for information from the IRS.  The IRS acknowledged the mistake and Public.Resource.org became curious about where else the information could be found.  Public.Resource.org found multiple incidents of Social Security numbers being exposed on the IRS website and wrote a letter that pointed out the issues to the IRS.  The IRS was able to remove some or all of the sensitive files from public view over the course of a few days.

Source: 
Media

Guildford County Schools, Page High School

Type of breach: 
Year of Breach: 
Type of organization: 
Under Review: 
0
Date Breach Made Public: 
July 11, 2013
geo: 
Greensboro , NC
United States
North Carolina US
Extra Info: 

Parents with questions may call 336-332-0810.

Records Breached: 

456 (No SSNs or financial information reported)

A Guildford County Schools employee accidentally emailed a PDF file that contained Page High School student personal information.  Student names, addresses, phone numbers, course enrollments, grades, school district identification numbers, and other transcript data were in the PDF file. The information was emailed to a single guardian on July 2, 2013.

Source: 
Media

Indiana Family and Social Services Administration (FSSA), RCR Technology Corporation

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
July 3, 2013
geo: 
Indianapolis , IN
United States
Indiana US
Records Breached: 

187,533 (3,926 SSNs exposed)

A computer programming glitch resulted in the exposure of client health, financial, and employment information.  Personal and private documents that belonged to certain clients were accidentally made available to other clients between April 6 and May 21 when FSSA contractor RCR Technology Corporation made a programming error.  The issue was discovered on May 10 and addressed on May 21.

Source: 
Media

Citi Prepaid Services

Type of breach: 
Year of Breach: 
Type of organization: 
Under Review: 
0
Date Breach Made Public: 
June 27, 2013
geo: 
New York , NY
United States
New York US
Extra Info: 

Those with questions may call (888) 742-9213.

Records Breached: 

Unknown

A code change in the prepaid cardholder website impacted the security features that authenticate cardholder logins.  Anyone who logged into the prepaid cardholder website between June 2 and June 13 was affected.  The issue was remediated and it does not appear that unauthorized charges have occurred on any of the affected accounts.

Source: 
California Attorney General

Florida State University, Florida Department of Education

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
June 24, 2013
geo: 
Tallahassee , FL
United States
Florida US
Records Breached: 

47,000

The information of 47,000 Florida teachers was publicly accessible for 14 days after a data transfer at Florida State University.  The information was from teachers participating in state prep programs.  The Department of Education used Florida State University as the contractor for the transfer of teacher data.

UPDATE (06/26/2013): People who participated in Florida teacher preparation programs during the 2009 -2010 and 2011-2012 academic years were affected.

Source: 
Media

Facebook

Type of breach: 
Year of Breach: 
Type of organization: 
Under Review: 
0
Date Breach Made Public: 
June 21, 2013
geo: 
Menlo Park , CA
United States
California US
Records Breached: 

6,000,000 (No SSNs or financial information involved)

Facebook discovered a bug that may have allowed unauthorized users to view the personal contact information of Facebook users.  The people who could have used the information would have had some kind of connection to them or some kind of contact information, but users may have thought their email and phone numbers were hidden from these connections.  People who used the Download Your Information (DYI) tool may have been able to access the contact information.  The issue was discovered by an external group of security researches involved with the White Hat program.

Source: 
Media

comScore

Type of organization: 
Year of Breach: 
Type of breach: 
Under Review: 
0
Date Breach Made Public: 
June 12, 2013
geo: 
Reston
United States
US
Records Breached: 

Unknown

Two comScore panelists filed a lawsuit in August of 2011 after downloading comScore software.  Allegedly, comScore collected and sold consumers' Social Security numbers, credit card numbers, financial information, retail transactions, and other personal information.  The action may have violated the Stored Communications Act, the Computer Fraud and Abuse Act, the Electronics Communications Privacy Act, and the Illinois Consumer Fraud and Deceptive Practices act. The lawsuit might cover tens of millions of people who have downloaded comScore software since 2005.

Source: 
Media

Pages

Showing 61-70 of 913 results
Subscribe to DISC