2019 Breaches
A Computer Crash Corrupted Security Software Opening Up Metro Atlanta School Database
Who: DeKalb County Schools # of Accounts Breached: Over 3,000 files What was affected: Over 2,700 of the uploaded images contained a driver's license or government-issued IDs, including social security cards. Over 80 included images of passports from the U.S. and...
Technical Glitch Affects Vendors on Amazon India Site
Who: Amazon India What was affected: The merchant tax reports that were accidentally passed on to unintended recipients contained data including sales, category-wise split, and inventory data. When it happened: January 2019 How it happened: Sources in the know of the...
Poorly Written Code in Major Airline Reservation System Exposes Information
Who: Amadeus ticket booking system # of Accounts Breached: Millions of clients data What was affected: The Amadeus ticket booking system is used by 141 international airlines which gives it control over 44% of the global online reservation market, with United...
Chinese Online Ticket Reservation Platform Breached by Data Thieves
Who: China Railway’s (CR) # of Accounts Breached: Nearly 5 million passengers’ data What was affected: Names, ID numbers, and passwords. How it happened: Data thieves stole the personal information of nearly 5 million people from an unconfirmed number of Chinese...
Dumpster Dive Nets Personal Information from Metro Dallas Tax Preparation Office
Who: Liberty Tax Alta Mesa What was affected: Bank account information, social security numbers, addresses, and drivers license numbers. When it happened: January 2019 How it happened: A woman in Mansfield got a call from a man who said he found her personal...
Patient Information Exposed in Michigan Rehab Security Breach
Who: Sacred Heart Rehabilitation Center What was affected: Patients' information, including full names, addresses, health insurance information, medical treatment information, medical diagnostic information and/or Social Security numbers. When it happened: April 5,...
Oracle Server at California Department of Insurance Breached
Who: California Department of Insurance (CDI) # of Accounts Breached: More than 24,450 reports What was affected: Agents’ name, renewal ID, and Tax Identification Number (TIN). Because many individuals use their Social Security Number as their TIN, there was the...
Mississauga Disability Support Program Unintentionally Emailed Data On Clients
Who: Mississauga ODSP office # of Accounts Breached: 45,000 What was affected: Name, email address and ODSP file number of 45,000 recipients When it happened: December 20, 2018 How it happened: On December 20th, due to a clerical error, the Mississauga ODSP office...
Email Hack Released PHI of Patients at Midwest Addiction Treatment Centers
Who: Valley Hope Association What was affected: Patient data. Name, address, medication/prescription information, Social Security number, financial account information, driver’s license or state identification card number, patient claim/billing information, date of...
11 million User Records Breached in Ransomware Attack
Who: MongoDB # of Accounts Breached: 854GB of data, with 202,730,434 records in total What was affected: The resumes contained all the sensitive details you might expect to find on a CV, such as full names, home addresses, phone numbers, emails, marital status, number...
Privacy Breach Responsible for Leaked of Sexual Childhood Trauma
Who: A Dartmouth, N.S., woman # of Accounts Breached: 1 What was affected: Personal information. "Assessments, details of the sexual trauma that I had experienced, my birth certificate, interviews with myself as a child," she said. When it happened: February 2018 How...
Breach of Unprotected Elastic Search Database results in Exposure Personal Information
Who: AIESEC # of Accounts Breached: Over 4 million intern applications What was affected: Applicant’s name, gender, date of birth, and the reasons why the person was applying for the internship. The database also contains the date and time when an application was...
Email Breach Exposes PHI from Virginia VA Medical Center
Who: Lebanon VA Medical Center # of Accounts Breached: Almost 1000 What was affected: The list contained veterans’ names, abbreviated Social Security numbers, the nursing home where the veteran had been admitted, diagnoses, and service-connection disability rating...
Trojan Virus Breaches Alaska Department of Health and Social Services
Who: The State of Alaska # of Accounts Breached: 87,000 What was affected: Names, Social Security numbers, dates of birth, addresses, health information, benefits information and other types of related information When it happened: April 26 to April 30, 2018 How it...
Laptop with Sensitive Information Stolen from Canadian Car Park
Who: United Conservative Party # of Accounts Breached: 40,000 members What was affected: Names, addresses, and contact information When it happened: How it happened: A party laptop was stolen out of an employee's car in a parking area. Outcome: The party informed...