On April 1, Massachusetts Financial Services Company notified (pdf) the New Hampshire Attorney General that they were informed by a customer on February 23 that an error in their online tax reporting system allowed Form 1099 tax forms of certain accounts to be viewed by an owner of one or more of these accounts. The…
Category: Breach Incidents
Northeast Rehabilitation Hospital patient data stolen
On April 8, Northeast Rehabilitation Hospital in Salem, New Hampshire notified (pdf) the New Hampshire Attorney General that paper and electronic records with personal and medical information on 8 patients was stolen from an employee’s vehicle on March 20. The hospital provides services to patients in homes and schools, and the laptop and document were…
Former Fox Entertainment employee arrested; employee data retrieved from home
On April 9, Fox Group notified (pdf) the New Hampshire Attorney General that Fox Entertainment Group had learned that employee information including names, Social Security numbers and some compensation data had been acquired without authorization by an employee of Fox’s benefits department. The employee was terminated and subsequently arrested. When a search warrant was executed…
HK: School website tests show up security lapses
Khushwant Singh of AsiaOne reports that (as elsewhere), many educational institutions in Singapore are inadvertently exposing personal information of students and staff on the web.
(Follow-up) AU: Bottle Domains dumped by auDA over security breach
Card Systems is frequently cited as an example of how costly a breach can be to a business, but in Australia, Bottle Domains may become a similar example. Following a breach that resulted in the theft of personal information on approximately 60,000 people that was put up for sale on the internet, the company has…
Five Romanians arrested for hacking into U.S. pharmaceutical companies
Dan Kaplan of SC Magazine reports that five people have been arrested for illegally accessing computer systems belonging to unnamed U.S. pharmaceutical companies. The hackers allegedly installed keylogger software to steal card data on point-of-sales systems. Lucian Constantin reports that according to a DIICOT press release (in Romanian), the remote administration system used by the…