This incident has 0 proposed changes.
Know of details that have changed? Submit them
Showing Incident 1198 
SUMMARY
| Extortion letter contains birth dates, social security numbers and prescription information, millions threatened | |
| Records | Unknown |
|---|---|
| Record Types | SSN NAA MED DOB |
| Breach Type | Unknown |
| Data Family | Unknown |
| Source | Outside |
| Organization | Express Scripts |
| Other Organizations | Toyota, US Steel & Carnegie Pension Fund, Group Insurance Commission |
| Lawsuit? | NO/UNKNOWN |
| Data Recovered? | NO/UNKNOWN |
| Arrest? | NO/UNKNOWN |
| Submitted By: | Lyger |
STOCK PRICE
SIMILAR INCIDENTS
| records | date | organizations |
|---|
TIMELINE
| Date | Event |
|---|---|
| None. Add Data | Incident Occurred |
| None. Add Data | Incident Discovered By Organization |
| 2008-11-06 | Organization Reports Incident |
| 2008-10-28 | Organization Mails Notifications |
| None. Add Data | Records Recovered |
| None. Add Data | Lawsuit Filed |
| None. Add Data | Arrest Made |
MAP OF INCIDENT LOCATION
Address: United States
Have a better address for this incident? Suggest it!
REFERENCES
suggest a new attachment
ATTACHMENTS
PRIMARY SOURCES
Primary Source ID: 879
| add details to this primary source Description | |||
|---|---|---|---|
|
Breach notification regarding extortion letters to Toyota.
|
|||
| Filename | Source | Researcher | Incident IDs |
| toyota.pdf | New Hampshire Consumer Protection & Antitrust Bureau | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| Not yet entered | 2008-11-28 | 2009-01-01 | 01 Jan 20:10 |
| Excerpt | |||
`;`" ‘‘';` § E" —_ _A_4V _,,; g rk?a¥§ts<.>z¤ { .°.° sistszsrs sos sttoter ‘3S:ss.§r-2:2... Novetrtber 2l, 2008 Attorney Generals Office Attn: Mary Gcruld, Legal Assistant Consumer Protect... |
|||
Primary Source ID: 689
| add details to this primary source Description | |||
|---|---|---|---|
|
This is unclear whether or not it relates to the Express Scripts / Toyota breach. The timeframe matches, and the scope appears to. Given the vague nature of this report, I'm inclined to say its the same breach for the time being.
|
|||
| Filename | Source | Researcher | Incident IDs |
| MD_ITU-161387.pdf | Maryland Attorney General | kirniki | 1198 |
| Records | File Date | Uploaded | Updated |
| 1 | 2008-10-29 | 2008-12-09 | 23 Sep 19:00 |
| Excerpt | |||
fg Exprzzss scmptss TRY EB . .;CEl‘¢ '•V r arr at attr smtaar · October 29, 2008 ’ Q ‘ ZBQB Mgr; - 3 1;; I.; 53 - The Honorable Douglas F. Gansler · " - Office of the Attorney General . A 200 St. P... |
|||
Primary Source ID: 953
| add details to this primary source Description | |||
|---|---|---|---|
|
Letter from unknown person with an intention to extort money, threatening to expose personal information stolen from the system
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081112-Express_Scripts.pdf | Maine Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| 75 | 2008-11-12 | 2009-01-12 | 19 Jan 14:18 |
| Excerpt | |||
(IL - xw Express scmprss "Y November l2, 2008 The Honorable G. Steven Rowe Office of the Attorney General State House Station 6 Augusta, ME 04333 - _ - Dear Attorney General Rowe, I am contacting you... |
|||
Primary Source ID: 947
| add details to this primary source Description | |||
|---|---|---|---|
|
Threatening letter received regarding revealing personal information of Toyota employees
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081121-Toyota_Express_Scripts.pdf | Maine Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| 188 | 2008-11-21 | 2009-01-12 | 23 Jan 10:00 |
| Excerpt | |||
''''''''''''''''''''''''''''''''''' Amsim py Colgen Toyota Motor Sales, [LSA., HIC. Y`€.¢:1va1g£·t;r! 2 =.·ai>:1.·* .\.»~ei’¤·:: a `November 21, 2008 Steven G. Rowe, Esq. Office ofthe Attorney... |
|||
Primary Source ID: 1148
| add details to this primary source Description | |||
|---|---|---|---|
|
See 1198. 75 confirmed, letter said "millions" were compromised.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081112-express_scripts.pdf | Colorado Attorney General | jericho | 1198 |
| Records | File Date | Uploaded | Updated |
| 75 | 2008-11-12 | 2009-01-24 | 24 Jan 20:34 |
| Excerpt | |||
mw2·e1;2mm"? 19:1*3 3mm22·am¤1 MGE m ’ rz '* 'fm EXPRESS SCR|PT5°" Y 'Y Ncnvumbcr I2, 2008 The Honorable John Suthcrs Office of the Attorncy General 1525 $h¢mm11 Struct Denver, CO 80203 Dear Attorn... |
|||
Primary Source ID: 1280
| add details to this primary source Description | |||
|---|---|---|---|
|
Letter containing threat about exposing customers personal information received
|
|||
| Filename | Source | Researcher | Incident IDs |
| VA_11192008_express_scripts.pdf | Virginia Attorney General | jkouns | 1198 |
| Records | File Date | Uploaded | Updated |
| 1 | 2008-11-19 | 2009-02-03 | 13 Feb 09:30 |
| Excerpt | |||
j_;§§.i’£·’as 9‘·é. Qi EXPRESS SCRIPTSP Noi-ernber li}. anus The lilonorable Bob l\/lcDonnell (_)i`tic.c ot the Attorney General 900 East Main Street Richmond. `\-·'/\ .'£32l9 . - Dear Attorney Gene... |
|||
Primary Source ID: 1488
| add details to this primary source Description | |||
|---|---|---|---|
|
On 11-12-2008 Express Scripts, a co. headquartered in St. Louis, MO, notified the Michigan Attorney General of a potential breach on Michigan residents. This potential breach source was an extortion letter sent to both the company and its clients/members, which threatened to expose PII allegedly stolen from the system. The PII at risk of exposure includes 75 member of the organization and includes social security numbers, names, dates of birth, and historical pharmaceutical prescriptions. The company reported this information to law enforcement and instituted a number of measures to mitigate the risk of identity theft including (a) issuance of press releases dated 11-6-2008 and 11-11-2008. (b) launch of a breach notification website to both notify and assist its clients/members, and (c) the availability of an identity restoration service to assist its clients/members.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081114_MI_express_scripts.pdf | Michigan Attorney General | Alina_Johnson | 1198 |
| Records | File Date | Uploaded | Updated |
| Not yet entered | 2008-11-12 | 2009-03-22 | 06 Apr 22:46 |
| Excerpt | |||
i _ l AQ]; , I · EXPRESS SCRiPTS® c "'? " A `” E . 6 . .$HE..--. »-· - ; November 12, .2008 ATTORNEY GENERAL ‘ r NOK! 1,4, 2088 1 ` The Honorable Mike Cox or Office of the Attorney General _... |
|||
Primary Source ID: 1255
| add details to this primary source Description | |||
|---|---|---|---|
|
Data breach notification : Extortion is attempted against Express Scripts with personal information being sent via mail to other persons.
|
|||
| Filename | Source | Researcher | Incident IDs |
| VA_12122008_express_scripts.pdf | Virginia Attorney General | jkouns | 1198 |
| Records | File Date | Uploaded | Updated |
| 75 | 2008-11-12 | 2009-02-03 | 21 May 09:43 |
| Excerpt | |||
gis;} EXP R ESS SC R I PTS November 12.2008 lhc Honorable Bob l\·‘teli)onncll (Jflice ofthe .-Xttorney General _g 900 hast `Vlain Street . it-,,r" l Y . Richmond. VA 232}*9 Dear Attorney General McD... |
|||
Primary Source ID: 2180
| add details to this primary source Description | |||
|---|---|---|---|
|
Massachusetts Data Breach Notification : Extortion letter contained personal information of 75 customers, with others supposedly breached via a hack.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081112_express_scripts.pdf | Massachusetts Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| 1 | 2008-11-12 | 2009-08-08 | 19 Aug 05:10 |
| Excerpt | |||
A Q1; eb EXPRESS SCRIPTS® *3 November l2, 2008 The Honorable Martha Coakley Office of the Attomey General 1 Ashburton Place Boston, MA 02108-1698 Dear Attorney General Coakley, A I am contacting you... |
|||
Primary Source ID: 2150
| add details to this primary source Description | |||
|---|---|---|---|
|
Massachusetts Data Breach Notification : Extortion letter to Express Scritps contains personal information of 75 customers and purports to have obtained many more.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081111_express_scripts.pdf | Massachusetts Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| 2 | 2008-10-29 | 2009-08-08 | 19 Aug 05:19 |
| Excerpt | |||
4:; _ fg zxpnzss SCRIPTSQ ` "Y a November ll, 2008 The Honorable Martha Coakley Office of the Attorney General One Ashburton Place Boston, MA 02108 U Dear Attomey General Coakley, The enclosed Report... |
|||
Primary Source ID: 2059
| add details to this primary source Description | |||
|---|---|---|---|
|
Massachusetts Data Breach Notification : Extortion letter to Express Scritps contains personal information of 75 customers and purports to have obtained many more.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081112_express_scripts_MA.pdf | Massachusetts Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| 1 | 2008-11-12 | 2009-08-08 | 19 Aug 05:19 |
| Excerpt | |||
l lin. eh EXPRESS SCRIPTS® "$ November l2, 2008 The Honorable Martha Coakley Office of the Attorney General l Ashburton Place Boston, MA 02l08-1698 Dear Attorney General Coakley, 1 am contacting you... |
|||
Primary Source ID: 2168
| add details to this primary source Description | |||
|---|---|---|---|
|
Massachusetts Data Breach Notification : Toyota - Extortion letter to Express Scritps contains personal information of 75 customers and purports to have obtained many more.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081121_toyota.pdf | Massachusetts Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| 101 | 2008-11-21 | 2009-08-08 | 19 Aug 05:20 |
| Excerpt | |||
A||is0¤ ]—[, Cohen Toyota Motor Sales, U.S.A., lnc. Managing Counsel 19001 South Westcm Avenue Torrance, CA 90501 310 468-7737 7 310 381-4430 Fax . November 21, 2008 Office of Attomey General Martha... |
|||
Primary Source ID: 2065
| add details to this primary source Description | |||
|---|---|---|---|
|
Massachusetts Data Breach Notification : Group Insurance Comissions - Extortion letter to Express Scritps contains personal information of 75 customers and purports to have obtained many more.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081107_commonwealth_group_insurance_MA.pdf | Massachusetts Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| Not yet entered | 2008-11-07 | 2009-08-08 | 19 Aug 05:20 |
| Excerpt | |||
The Commonwealth of Massachusetts N . • • .-Tk ini Group Insurance Commission _ I E ··`o " 1¤.o. Box am il ' 'BOSEOD, M8SS8£hHSCHS,O2II4-8747 (617} 7212310 J} ig? ({5; jr?. j, py gg; i i ` Fax... |
|||
Primary Source ID: 2193
| add details to this primary source Description | |||
|---|---|---|---|
|
Massachusetts Data Breach Notification : Group Insurance Comissions - Extortion letter to Express Scritps contains personal information of 75 customers and purports to have obtained many more.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081107_group_insurance_commission.pdf | Massachusetts Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| Not yet entered | 2008-11-07 | 2009-08-08 | 19 Aug 05:20 |
| Excerpt | |||
I' I 'he Commonwealth of Massachusetts & . i ,'r» ` I e; Iii ° ' Group IHSUIHIICC COIHIHISSIOH ` ii i P.O. Box 8747 E j T; ···· -Boston, Massachusetts.02l14>8747 (617) 727-2310 Qi i gs q... |
|||
Primary Source ID: 2343
| add details to this primary source Description | |||
|---|---|---|---|
|
New Hampshire breach notification - Express Scripts - customers names, dates of birth, Social Security numbers, and some historical prescription information exposed. 1771 New Hampshire residents affected.
|
|||
| Filename | Source | Researcher | Incident IDs |
| express_scripts.pdf | New Hampshire Consumer Protection & Antitrust Bureau | kirniki | 1198 |
| Records | File Date | Uploaded | Updated |
| 1771 | 2009-09-14 | 2009-12-06 | 06 Dec 21:29 |
| Excerpt | |||
. _.;; H S e s E S S S sz; a i e r s r Septe.rnlaer ttl, 2009 BY FEDERAL EX?REiS$ The Hionorahle Michael Delaney Ctftice of the Attorney General State liouse Annex 33 Capitol Street Concord, NH 3€... |
|||
COMMENTS
by d2d [Data Loss Maven] on 2009-01-02 (about 1 year ago)
This is quite the fascinating case. It would appear to affect several more organizations than have been disclosed to date.
Breach Types:
- Disposal Computer | Disposal Document | Disposal Tape | Disposal Drive
- Email | Fraud Se | Hack | Lost Computer
- Lost Document | Lost Drive | Lost Laptop | Lost Media
- Lost Tape | Missing Laptop | Snail Mail | Stolen Computer
- Stolen Document | Stolen Drive | Stolen Laptop | Stolen Media
- Stolen Tape | Unknown | Virus | Web
