Posts Tagged ‘Data breach’

Express Script hackers update: 1,700 added to victim list

Wednesday, December 16th, 2009

Apparently, hackers stole even more of Express Scripts’ member information than was initially revealed last fall. An additional 1,771 New Hampshire residents are being sent data breach notification letters this week, according to a September 14 letter from Express Scripts.

Express Scripts, one of the world’s largest pharmacy benefits management companies, revealed in November 2008 that hackers demanded ransom in exchange for stolen customer information. Unless the ransom was paid, the hackers threatened to reveal the members’ information.

To strengthen their threat, the hackers sent personal information–including names, birth dates, Social Security numbers and some prescription details–of 75 of the firm’s 50 million customers. (more…)

ID theft risk: Dumpster full of data found in Palm Beach County

Monday, October 12th, 2009

One of the reasons the risk of ID theft is so high has to do with your employer. You don’t have any idea what happens to your personal information after you provide it to an employer. Unless, that is, you work for the staffing agency CLP. If so, there’s a good chance your personal information was in one of the boxes found in a Dumpster out back of a Florida restaurant last week.

A worker at Newport Café discovered everything necessary to commit identity theft in the boxes full of job applications, copies of Social Security cards, driver’s licenses and tax records. The job applications bore the CLP logo.

The restaurant employee contacted the local police, who, in turn, contacted staffing firm’s regional director in Fort Lauderdale. The CLP regional director, Seth Sandler, made a quick trip up to Palm Beach County and “took care of the situation,” said Corp. Michelle Vazquez of the Palm Springs police.

Until last week, CLP had an office next door to the restaurant, but Newport Café employees said they saw people moving out the office furnishings the day before the documents were discovered. (more…)

National Archives data breach: Hard drive with 70 million veterans’ health, service records

Tuesday, October 6th, 2009

American military veterans have been put at risk again. An unencrypted hard drive associated with eVetRec—the system veterans use to access their health records and discharge papers—was sent first for repairs then for recycling without being wiped of 76 million veterans’ records.

The hard drive failed last November and was returned to the contractor that sold it to the National Archives and Records Administration (NARA). When the contractor was unable to fix the drive, the contractor sent it to another company for recycling. (more…)

Express Scripts hackers update: 1,700 added to victims list

Tuesday, September 22nd, 2009

Apparently, hackers stole even more of Express Scripts’ member information than was initially revealed last fall. An additional 1,771 New Hampshire residents are being sent data breach notification letters this week, according to a September 14 letter from Express Scripts.

Express Scripts, one of the world’s largest pharmacy benefits management companies, revealed in November 2008 that hackers demanded ransom in exchange for stolen customer information. Unless the ransom was paid, the hackers threatened to reveal the members’ information.

To strengthen their threat, the hackers sent personal information–including names, birth dates, Social Security numbers and some prescription details–of 75 of the firm’s 50 million customers.

Express Scripts publicly refused to pay the ransom, even after some of their customers received similar letters, extortion attempts and sample employee information. Toyota, government agencies and labor unions were among those contacted by the hackers. (more…)

National Guard Data Breach: Stolen laptop leaves 131,000 soldiers potential ID theft victims

Thursday, August 6th, 2009

Of course military service has inherent personal safety risks—that’s what makes enlistment so noble. But the risk of identity theft is something 131,000 current and former Army National Guards soldiers will be considering very seriously.

The Army National Guard announced this week that a contractor’s laptop containing the soldiers’ personal information was stolen July 27. The contractor was involved in the Army National Guard Bonus and Incentives Program.

The compromised information included program participants’ names, Social Security numbers, payment amounts and payment dates. (more…)

Data breach: New Hampshire prisoner found with list of all Corrections employees’ info

Tuesday, August 4th, 2009

Here’s how we’d like to think of it: Prison inmates are the stupid ones and their keepers are the smart ones.

Here’s how it really is: An unnamed New Hampshire prison employee assigned prisoners to work in a warehouse where they had access to Corrections Department records, including a list of ALL department employees and their Social Security numbers.

Big surprise: An inmate in a Concord minimum-security prison absconded with the list, which was discovered in his cell during a routine search.

The employee information included names, titles, positions, departments, labor grades and Social Security numbers of the roughly 1,000 people employed in the Corrections Department as of March 2008. (more…)

Fla. Department of Education notifies student loan recipients of data breach

Monday, July 13th, 2009

If you’re already defaulting on your student loan, you might be praying that the state agency that manages it would somehow just lose the promissory note, thereby letting you off the hook.

Florida students got only half of what they wished for, and a whole lot of something they never wanted. (more…)

Max Ray Vision, ruler of global online ID theft forum, enters guilty plea

Thursday, July 9th, 2009

Uber-hacker Max Ray Vision entered a guilty plea on two charges of wire fraud in federal court yesterday.

Vision, 36, has been called a mild-mannered geek, a hacker’s hacker, a Dr. Jeckyll-Mr. Hyde type and the most interesting hacker ever. He was a black-hat hacker, a white-hat consultant and the owner and ruler of CardersMarket.com, an online forum where 6,000 people bought, sold and traded stolen personal and financial information. (more…)

ID theft rings scour toxic e-waste dumps for computer hard drives

Thursday, July 2nd, 2009

Every year millions of tons of discarded government, business and personally owned computers end up in one of the sprawling, smoldering e-waste dumps in developing countries. Your wedding photos may be in Ghana, resting against multi-million dollar defense contracts. Your financial records may be in India, buried beneath Homeland Security white papers. (more…)

LifeLock review: VCU data breach affects 50,000 students

Sunday, June 7th, 2009

If you needed further evidence that our institutions of higher learning are failing to secure personally identifying information, Virginia Commonwealth University (VCU) brought new supporting evidence this week. (more…)