Back in March, InterMedia Outdoors notified the Maine Attorney General’s Office that they had received several reports of credit card fraud after customers had placed telephone orders with InterMedia Outdoors. According to their notification, the potential breach began as early as August 2009 and was first discovered in February 2010. That report, which I had…
Author: Dissent
Another laptop. Another car. Another “gah” moment.
Arizona-based Vision Quest provides services for youth in five states, including Maryland. In a letter sent to the Maryland Attorney General’s Office, Vision Quest reported that a laptop stolen from an employee’s car on June 7 contained client information such as’ names, addresses, Social Security Numbers, dates of birth, DJS number, and encounter information. …
Update: ALDI breach potentially affects 8,000 in Maryland alone
Although ALDI has repeatedly said that the tampering of pin pads affected only a “limited number of stores” in their 1000+store chain, the number of customers affected continues to grow as new reports emerge. In a report to the Maryland Attorney General’s Office dated October 1, Terry E. Pfortmiller, ALDI Vice-President of Finance and Administration,…
Destination Hotels & Resorts update: hack may have occurred in 2009
Although Destination Hotels & Resorts never responded to my inquiry about how many guests were affected by a breach reported previously on this blog, a notification their law firm filed with the Maryland Attorney General’s Office on July 20th indicated that 1,354 residents of Maryland were also affected by the hacking incident that occurred between…
Medco coding change exposes prescription benefit data
They probably wished it was an April’s Fool joke, but it wasn’t. On April 1, United Healthcare learned that their business associate, Medco, had suffered a computer system error that exposed members’ prescription benefit messages on the Medco web site to other members. In a letter dated May 24 to the Maryland Attorney General’s Office,…
Watch those portable devices, Tuesday edition
Maryland-based HomeCall Inc. recently notified the Maryland Attorney General’s Office that an employee’s portable point-of-care device was stolen. The device contained names, addresses, SSN, medical record number, diagnoses, and treatment information. HomeCall reports that the device was “multi-level password protected” (but not encrypted). In correspondence to those affected, HomeCall stated that the device…