This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 2427

SUMMARY

Missing hard drive exposes 1.5M customers names, Social Security numbers, and medical details
Records	1,500,000
Record Types	SSN NAA MED FIN
Breach Type	Lost Drive
Data Family	Electronic
Source	Inside - Accidental
Organization	Health Net
Other Affected/Involved Organizations	None
Lawsuit?	YES
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	kirniki

TIMELINE

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: (type the code from the image)
2009-05-08	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: (type the code from the image)
2009-11-19	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: (type the code from the image)
2010-01-13	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: (type the code from the image)

SIMILAR INCIDENTS

records	date	organizations

SPONSOR

Zecurion protects organizations worldwide, with more than 5,000 global deployments, using its award-winning software security solutions. Zecurion’s solutions create a “locked-vault” around data on servers, backup storage media, e-mail, peripheral devices and printers that both monitors and prevents unauthorized access.

MAP OF INCIDENT LOCATION

Address: Connecticut, USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate ¹

$90,000,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

PRIMARY SOURCES

Primary Source ID: 2357

add details to this primary source Description
New Hampshire breach notification - Health Net - customers personal details, including names, addresses, Social Security numbers exposed on missing hard drive. 504 New Hampshire residents affected.
Filename	Source	Researcher	Incident IDs
health_net.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	2427
Records	File Date	Uploaded	Updated
504	2009-11-23	2009-12-06	07 Dec 19:51
Excerpt
s 'hlovernber 23, 2tl09 The Honorable Michael A. Delaney 33 Capitol Street Concord, NH tl330l Fax: {603} 27l—2l lt} Dear Mr. Attorney General, We are writing to inform you about a security incident...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 2481

add details to this primary source Description
Massachusetts breach notification: Health Net - customers personal details, including names, addresses, Social Security numbers exposed on missing hard drive. 802 MA residents affected.
Filename	Source	Researcher	Incident IDs
ITU182383.pdf	Maryland Attorney General	kirniki	2427
Records	File Date	Uploaded	Updated
802	2009-11-23	2010-02-26	27 Jun 12:48
Excerpt
’`·· ‘ 160 W. Slauson Ave. Suite 7, Los Angles, CA 90003 phone 323 234-1495 fax 415 983—2514 www.PureSl:yleGirlfriends.c0m December l9, 2009 RE: Fraud Alert Notification, Credit Card Fraud To Whom...

Click here for the Full Details | Download Raw PDF

Videos

COMMENTS

Incidents:

Data Types:

Sectors:

Sources:

Breach Types:

Disposal Computer | Disposal Document | Disposal Tape | Disposal Drive
Email | Fraud Se | Hack | Lost Computer
Lost Document | Lost Drive | Lost Laptop | Lost Media
Lost Tape | Missing Laptop | Snail Mail | Stolen Computer
Stolen Document | Stolen Drive | Stolen Laptop | Stolen Media
Stolen Tape | Unknown | Virus | Web