The Maryland Attorney General’s Office web site update reveals a number of breaches in the past few months that were never reported in the media. In addition to other news items reported earlier today on this site, here are some more newly revealed breaches: Pension Fund of the U.S.W.U. Local No. 74 reported that in…
Category: Lost or Missing
NHS puts over 20,000 records at risk
The Information Commissioner’s Office (ICO) is issuing further warnings to NHS bodies about the importance of data security, after finding five more NHS organisations in breach of the Data Protection Act. In one case, a ward hand-over sheet containing notes about patients’ health was left on a bus. The Royal Free Hampstead NHS Trust reported…
Canyons SD thumb drive missing
Canyons School District officials are investigating the disappearance of a thumb drive that may have contained the personal information of more than 6,000 current and recent employees. The flash drive is believed to have contained employee addresses, phone numbers, dates of birth and Social Security numbers. A district-level worker was using it to transfer data…
FL DOE loses loan promissory notes
Bill Cotterell of the Tallahassee Democrat reports a breach involving the Florida Department of Education’s Office of Student Financial Assistance: The agency is notifying 475 student-loan borrowers that their financial records have been exposed to identity theft because the OSFA managed to lose 1,186 “promissory notes” that they signed when they were going to school,…
Missing sheriff’s laptop held SSN (updated)
Not much meat to the report, but WKRC, Local12.com in Ohio, is reporting that: A laptop missing from the Hamilton County Sheriff’s Department is putting some people in jeopardy of identity theft. A letter was sent out to those affected. The sheriff’s department says the computer contained personal information, including social security numbers. There doesn’t…
Jubilee Found in Breach of DPA
The Information Commissioner’s Office (ICO) has found Jubilee Managing Agency Ltd in breach of the Data Protection Act after the insurance company reported the loss of an unencrypted disk containing the personal details of around 2100 individual UK policyholders. Jubilee Managing Agency has signed a formal Undertaking outlining that it will take reasonable measures to…