Remember back in December when Ohio State University announced that it had detected a breach at the end of October and would be notifying 760,000 people who had personally identifiable information on the server? It seems that they are still trying to notify some of them. Encarnacion Pyle reports in The Columbus Dispatch: A hacker…
Category: Breach Incidents
UK: Renewal applications lost by Passport Service
The Identity and Passport Service (IPS) breached the Data Protection Act by losing the passport renewal applications of 21 individuals, the Information Commissioner’s Office (ICO) said today. The loss occurred in May 2010 at the passport office that was responsible for processing the applications and the ICO was subsequently informed. The missing details included the…
Ozarks Woman Gets Letter From Bank with Social Security Number on Envelope
Joanna Small of WSBT reports that a lien release mailed to a customer by Commerce Bank included the customer’s social security number on the envelope, right under the customer’s name: […] We talked to a Commerce Bank spokesperson Saturday evening. She says the bank will immediately look into the Martin’s situation and have an explanation…
UK: 100 police workers in breach of data protection
Coreena Ford reports: A police officer is suspected of using a force computer to pass classified information onto criminals, the Sunday Sun can reveal. The community support officer – who was sacked – is one of no less than 100 North officers and civilian staff to breach data protection laws for their own use over…
Loud Technologies’ employee info on stolen computer
Through their lawyers, Loud Technologies has notified the New Hampshire Attorney General’s Office that a computer stolen from their premises contained current and former employee information including names and Social Security numbers. The theft of the password-protected device was discovered on November 15 and was one of a number of pieces of equipment stolen from…
(update) Hacker accessed HuskyDirect.com database by using vendor’s administrative password
On January 31, lawyers for the University of Connecticut Cooperative Corporation notified the New Hampshire Attorney General’s Office of a breach mentioned previously on this blog. Their letter revealed some previously unreported details, including the fact that the HuskyDirect.com web site was hosted and managed by Fuss & O’Neill Technologies LLC in Connecticut, a firm that does business…