This incident has 0 proposed changes.
Know of details that have changed? Submit them
Showing Incident 1198 
SUMMARY
| Extortion letter contains birth dates, social security numbers and prescription information, millions threatened | |
| Records | Unknown |
|---|---|
| Record Types | SSN NAA MED DOB |
| Breach Type | Unknown |
| Source | Outside |
| Organization | Express Scripts |
| Other Organizations | Toyota, US Steel & Carnegie Pension Fund |
| Lawsuit? | NO/UNKNOWN |
| Data Recovered? | NO/UNKNOWN |
| Arrest? | NO/UNKNOWN |
| Submitted By: | Lyger |
STOCK PRICE
SIMILAR INCIDENTS
| records | date | organizations |
|---|---|---|
| 0 | 2008-06-23 | JDS Uniphase |
| 0 | 2008-10-27 | American All-Risk Loss Administrators (AARLA) |
| 0 | 2007-02-08 | Fresenius Medical Care Holdings Inc. (FMCNA) |
TIMELINE
| Date | Event |
|---|---|
| None. Add Data | Incident Occured |
| None. Add Data | Incident Discovered By Organization |
| 2008-11-06 | Organization Reports Incident |
| 2008-10-28 | Organization Mails Notifications |
| None. Add Data | Records Recovered |
| None. Add Data | Lawsuit Filed |
| None. Add Data | Arrest Made |
MAP OF INCIDENT LOCATION
Address: United States
Have a better address for this incident? Suggest it!
REFERENCES
suggest a new attachment
ATTACHMENTS
PRIMARY SOURCES
Primary Source ID: 879
| add details to this primary source Description | |||
|---|---|---|---|
|
Breach notification regarding extortion letters to Toyota.
|
|||
| Filename | Source | Researcher | Incident IDs |
| toyota.pdf | New Hampshire Consumer Protection & Antitrust Bureau | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| Not yet entered | 2008-11-28 | 2009-01-01 | 01 Jan 20:10 |
| Excerpt | |||
`;`" ‘‘';` § E" —_ _A_4V _,,; g rk?a¥§ts<.>z¤ { .°.° sistszsrs sos sttoter ‘3S:ss.§r-2:2... Novetrtber 2l, 2008 Attorney Generals Office Attn: Mary Gcruld, Legal Assistant Consumer Protect... |
|||
Primary Source ID: 689
| add details to this primary source Description | |||
|---|---|---|---|
|
This is unclear whether or not it relates to the Express Scripts / Toyota breach. The timeframe matches, and the scope appears to. Given the vague nature of this report, I'm inclined to say its the same breach for the time being.
|
|||
| Filename | Source | Researcher | Incident IDs |
| MD_ITU-161387.pdf | Maryland Attorney General | kirniki | 1198 |
| Records | File Date | Uploaded | Updated |
| 1 | 2008-10-29 | 2008-12-09 | 02 Jan 21:55 |
| Excerpt | |||
fg Exprzzss scmptss TRY EB . .;CEl‘¢ '•V r arr at !¥§`T`r’·13E.f~%’ERr&L · October 29, 2008 ’ Q ‘ ZBQB Mgt; - 3 1;; if 53 - The Honorable Douglas F. Gansler · " - Office of the Attorney General . A... |
|||
Primary Source ID: 953
| add details to this primary source Description | |||
|---|---|---|---|
|
Letter from unknown person with an intention to extort money, threatening to expose personal information stolen from the system
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081112-Express_Scripts.pdf | Maine Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| 75 | 2008-11-12 | 2009-01-12 | 19 Jan 14:18 |
| Excerpt | |||
(IL - xw Express scmprss "Y November l2, 2008 The Honorable G. Steven Rowe Office of the Attorney General State House Station 6 Augusta, ME 04333 - _ - Dear Attorney General Rowe, I am contacting you... |
|||
Primary Source ID: 947
| add details to this primary source Description | |||
|---|---|---|---|
|
Threatening letter received regarding revealing personal information of Toyota employees
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081121-Toyota_Express_Scripts.pdf | Maine Attorney General | d2d | 1198 |
| Records | File Date | Uploaded | Updated |
| 188 | 2008-11-21 | 2009-01-12 | 23 Jan 10:00 |
| Excerpt | |||
''''''''''''''''''''''''''''''''''' Amsim py Colgen Toyota Motor Sales, [LSA., HIC. Y`€.¢:1va1g£·t;r! 2 =.·ai>:1.·* .\.»~ei’¤·:: a `November 21, 2008 Steven G. Rowe, Esq. Office ofthe Attorney... |
|||
Primary Source ID: 1148
| add details to this primary source Description | |||
|---|---|---|---|
|
See 1198. 75 confirmed, letter said "millions" were compromised.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081112-express_scripts.pdf | Colorado Attorney General | jericho | 1198 |
| Records | File Date | Uploaded | Updated |
| 75 | 2008-11-12 | 2009-01-24 | 24 Jan 20:34 |
| Excerpt | |||
mw2·e1;2mm"? 19:1*3 3mm22·am¤1 MGE m ’ rz '* 'fm EXPRESS SCR|PT5°" Y 'Y Ncnvumbcr I2, 2008 The Honorable John Suthcrs Office of the Attorncy General 1525 $h¢mm11 Struct Denver, CO 80203 Dear Attorn... |
|||
Primary Source ID: 1280
| add details to this primary source Description | |||
|---|---|---|---|
|
Letter containing threat about exposing customers personal information received
|
|||
| Filename | Source | Researcher | Incident IDs |
| VA_11192008_express_scripts.pdf | Virginia Attorney General | jkouns | 1198 |
| Records | File Date | Uploaded | Updated |
| 1 | 2008-11-19 | 2009-02-03 | 13 Feb 09:30 |
| Excerpt | |||
j_;§§.i’£·’as 9‘·é. Qi EXPRESS SCRIPTSP Noi-ernber li}. anus The lilonorable Bob l\/lcDonnell (_)i`tic.c ot the Attorney General 900 East Main Street Richmond. `\-·'/\ .'£32l9 . - Dear Attorney Gene... |
|||
Primary Source ID: 1488
| add details to this primary source Description | |||
|---|---|---|---|
|
On 11-12-2008 Express Scripts, a co. headquartered in St. Louis, MO, notified the Michigan Attorney General of a potential breach on Michigan residents. This potential breach source was an extortion letter sent to both the company and its clients/members, which threatened to expose PII allegedly stolen from the system. The PII at risk of exposure includes 75 member of the organization and includes social security numbers, names, dates of birth, and historical pharmaceutical prescriptions. The company reported this information to law enforcement and instituted a number of measures to mitigate the risk of identity theft including (a) issuance of press releases dated 11-6-2008 and 11-11-2008. (b) launch of a breach notification website to both notify and assist its clients/members, and (c) the availability of an identity restoration service to assist its clients/members.
|
|||
| Filename | Source | Researcher | Incident IDs |
| 20081114_MI_express_scripts.pdf | Michigan Attorney General | Alina_Johnson | 1198 |
| Records | File Date | Uploaded | Updated |
| Not yet entered | 2008-11-12 | 2009-03-22 | 06 Apr 22:46 |
| Excerpt | |||
i _ l AQ]; , I · EXPRESS SCRiPTS® c "'? " A `” E . 6 . .$HE..--. »-· - ; November 12, .2008 ATTORNEY GENERAL ‘ r NOK! 1,4, 2088 1 ` The Honorable Mike Cox or Office of the Attorney General _... |
|||
Primary Source ID: 1255
| add details to this primary source Description | |||
|---|---|---|---|
|
Data breach notification : Extortion is attempted against Express Scripts with personal information being sent via mail to other persons.
|
|||
| Filename | Source | Researcher | Incident IDs |
| VA_12122008_express_scripts.pdf | Virginia Attorney General | jkouns | 1198 |
| Records | File Date | Uploaded | Updated |
| 75 | 2008-11-12 | 2009-02-03 | 21 May 09:43 |
| Excerpt | |||
gis;} EXP R ESS SC R I PTS November 12.2008 lhc Honorable Bob l\·‘teli)onncll (Jflice ofthe .-Xttorney General _g 900 hast `Vlain Street . it-,,r" l Y . Richmond. VA 232}*9 Dear Attorney General McD... |
|||
COMMENTS
by d2d [Data Loss Maven] on 2009-01-02 (6 months ago)
This is quite the fascinating case. It would appear to affect several more organizations than have been disclosed to date.
Breach Types:
- Disposal Computer | Disposal Document | Disposal Tape | Disposal Drive
- Email | Fraud Se | Hack | Lost Computer
- Lost Document | Lost Drive | Lost Laptop | Lost Media
- Lost Tape | Missing Laptop | Snail Mail | Stolen Computer
- Stolen Document | Stolen Drive | Stolen Laptop | Stolen Media
- Stolen Tape | Unknown | Virus | Web