This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 2521

SUMMARY

Hacked server exposes 80,000 employees names, birth dates and Social Security numbers
Records	80,000
Record Types	SSN NAA DOB
Breach Type	Hack
Data Family	Electronic
Source	Outside
Organization	Iowa Racing and Gaming Commission
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	kirniki

Date	Event
2010-01-26	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: (type the code from the image)
2010-01-30	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: (type the code from the image)
2010-02-02	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: (type the code from the image)

records	date	organizations
90,000	2004-02-13	California Employment Dev. Dept.
200,000	2004-04-29	Illinois Secretary of State
70,000	2007-01-29	Vermont Agency of Human Services
76,600	2007-02-10	State of Indiana

Address: Des Moines, IA, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$4,800,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.