DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Lawsuit: 29,000 say Kaiser hid security breach

Posted on October 15, 2009 by Dissent

Maria Dinzeo reports on a class action lawsuit stemming from a 2007 breach that was first reported earlier this year:

Twenty-nine thousand Kaiser employees say the company did not inform them for more than a year about a security breach that left their personal information vulnerable to thieves. One employee says a woman stole her identity and used it to run up credit-card charges and “commit crimes across the country.”

The class of employees and members of SEIU United Healthcare West, claims that Kaiser provided the union with their names, birthdates, addresses and Social Security numbers “in connection with remittance of union dues,” but failed to encrypt the information, which was exposed when burglars broke into the UHW offices in July 2007 and made off with computer files.

Lead plaintiff Monica Saenz says she found out in October 2008 that her identity had been stolen. Saenz says her credit report showed that someone had withdrawn money from her bank account and had opened and run up charges on 10 credit cards. Saenz claims that a woman was using her identity to “commit crimes across the country.”

The class claims that Kaiser did not notify its 29,000 employees that their records had been stolen until February 2009, and that it delayed for 19 months in order to “shift the burden” for the identity theft.

Read more on Courthouse News.

Category: Health DataID TheftOf NoteTheftU.S.

Post navigation

← Call centre recordings could breach payment card industry security rules
WI: Fabric store customers warned of debit card fraud →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Plastic surgeons often store nude photos of patients with their identity information. When would we call that “negligent?”
  • India: Servers of two city hospitals hacked; police register FIR
  • Ph: Coop Hospital confirms probe into reported cyberattack
  • Slapped wrists for Financial Conduct Authority staff who emailed work data home
  • School Districts Unaware BoardDocs Software Published Their Private Files
  • A guilty plea in the PowerSchool case still leaves unanswered questions
  • Brussels Parliament hit by cyber-attack
  • Sweden under cyberattack: Prime minister sounds the alarm
  • Former CIA Analyst Sentenced to Over Three Years in Prison for Unlawfully Transmitting Top Secret National Defense Information
  • FIN6 cybercriminals pose as job seekers on LinkedIn to hack recruiters

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Anne Wojcicki Wins Bidding for 23andMe
  • Would you — or wouldn’t you?
  • New York passes a bill to prevent AI-fueled disasters
  • Synthetic Data and the Illusion of Privacy: Legal Risks of Using De-Identified AI Training Sets
  • States sue to block the sale of genetic data collected by DNA testing company 23andMe
  • AI tools collect and store data about you from all your devices – here’s how to be aware of what you’re revealing
  • 23andMe Privacy Ombudsman Urges User Consent Pre-Data Sale

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.