Here are another 11 breach notifications submitted to the Maryland Attorney General’s Office. These were filed in May and June, and in all but one case, we didn’t know about them through the media or other sources. A breach involving USAA Federal Savings Bank had previously been noted on this site, but there’s more to…
Category: Exposure
Error by Veterans Affairs vendor exposed 3,936 veterans’ SSN in mailing
In its most recent report to Congress, the Veterans Affairs Department reported that on August 25, 6,299 out of the 69,366 “Benefit Summary” letters intended for veterans and non-veterans in Massachusetts were mailed to incorrect addresses. The letters contained the veterans’ and non-veterans’ benefit information including their claim number, which, in some instances, was the…
UK doctors’ personal data found on used hard drive sold online
There have been many instances in the U.S. of personal data showing up on equipment sold at online and offline auctions. Once such case in the U.K. involved doctors’ data and the company responsible for the data, Healthcare Locums Plc (HCL), a UK specialist healthcare recruitment agency, has now been found in breach of the Data Protection Act…
Encryption didn’t prevent this breach
A report to the Maryland Attorney General’s Office from ING gave me pause because I don’t remember ever seeing a security issue like this before in a breach report. In their notification, ING writes (emphasis added by me): ReliaStar Life Insurance Company (RLIC) is responsible for premium administration for RLIC insurance products purchased by employees of…
Everywhere you look, there are breaches we didn’t know about…
Here are summaries of some other breach reports recently filed with the Maryland Attorney General’s Office. I’ve tried to sort them or organize them somewhat as I am going through them. Some of the incidents affect only a few individuals, while others impact many more. Most of them have never been reported in the…
UK: Omniquad rapped for data breach
Christine Donnelly reports: The publication of customer details online by managed security services provider Omniquad has been blamed on a glitch in its helpdesk software. Daniel Sobstel, managing director of Omniquad, said the system was taken offline within several minutes of thedata breach being brought to his attention last Monday. Read more on ChannelWeb. Privacy International…